CVE-2026-56662 | GetSimpleCMS-CE GetSimple CMS up to 1.4 Update Form upgrade.json url cross-site request forgery

October 1, 2026 Yanac

A vulnerability was found in GetSimpleCMS-CE GetSimple CMS up to 1.4. It has been classified as problematic. This impacts an unknown function of the file upgrade.json of the component Update Form. This manipulation of the argument url causes cross-site request forgery.

This vulnerability is registered as CVE-2026-56662. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More