CVE-2024-11125: GetSimpleCMS profile.php cross-site request forgery

Published Nov 12, 2024

Updated

A vulnerability was found in GetSimpleCMS 3.3.16 and classified as problematic. This issue affects some unknown processing of the file /admin/profile.php. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

Get-simple Getsimplecms=3.3.16

Event History

Nov 12, 2024

CVE Published

via MITRE·02:31 PM

Data Sourced

via MITRE·02:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-11125?

CVE-2024-11125 is classified as a problematic vulnerability due to its impact on cross-site request forgery.

How do I fix CVE-2024-11125?

To fix CVE-2024-11125, update GetSimpleCMS to the latest version that addresses this vulnerability.

What is affected by CVE-2024-11125?

CVE-2024-11125 specifically affects GetSimpleCMS version 3.3.16.

Can CVE-2024-11125 be exploited remotely?

Yes, CVE-2024-11125 can be exploited remotely through cross-site request forgery.

What file is associated with CVE-2024-11125 vulnerability?

The CVE-2024-11125 vulnerability is associated with the /admin/profile.php file in GetSimpleCMS.