EIP-2026-107390

PRE-CVE

Getsimple CMS 2.01 - Multiple Vulnerabilities

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-107390. PoCs published by 10n1z3d.

AI-analyzed exploit summary The exploit demonstrates multiple CSRF and XSS vulnerabilities in GetSimple CMS 2.01. It includes functional PoC code for changing admin passwords, deleting pages, deleting backups, logging out administrators, and executing XSS via crafted URLs.

Description

Getsimple CMS 2.01 - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED
by 10n1z3d · htmlwebappsphp
https://www.exploit-db.com/exploits/14338

The exploit demonstrates multiple CSRF and XSS vulnerabilities in GetSimple CMS 2.01. It includes functional PoC code for changing admin passwords, deleting pages, deleting backups, logging out administrators, and executing XSS via crafted URLs.

Classification
Working Poc 100%
Attack Type
Xss | Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: GetSimple CMS 2.01
No auth needed
Prerequisites: Victim must visit a malicious page or click a crafted link
devstral-2 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026