← Database

CVE-2021-47778

HIGH CVSS: 7.2 Published: 2026-01-21 Modified: 2026-06-17

Description

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.

Affected Platforms

Get-Simple Getsimplecms

Weakness Type

CWE-94

References