CVE-2021-28976

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• GetSimpleCMS 3.3.16 - Remote Code Execution (RCE)2025-04-11 · webapps · php

Impact

Remote Code Execution vulnerability in GetSimpleCMS before 3.3.16 in admin/upload.php via phar filess.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1335
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1335