CVE-2015-5356: Get-Simple Getsimple CMS

Medium severity, CVSS 4.3. EPSS: 1.8% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in admin/filebrowser.php in GetSimple CMS before 3.3.6 allows remote attackers to inject arbitrary web script or HTML via the func parameter.

Affected products

• Get-Simple Getsimple CMS: up to and including 3.3.2

Published 2015-07-01. Last modified 2026-06-17.