EIP-2026-107391

This writeup details an information disclosure vulnerability in GetSimple CMS versions 2.01 and 2.02, where administrative credentials and other sensitive data are stored in unprotected XML files. The researcher explains the lack of access controls and the triviality of cracking the SHA1 password hashes.