CVE-2021-47778: Get-Simple Getsimplecms

High severity, CVSS 7.2. EPSS: 1.3% chance of exploitation in the next 30 days.

GetSimple CMS My SMTP Contact Plugin 1.1.2 contains a PHP code injection vulnerability. An authenticated administrator can inject arbitrary PHP code through plugin configuration parameters, leading to remote code execution on the server.

Affected products

• Get-Simple Getsimplecms: version 1.1.2 only

Published 2026-01-21. Last modified 2026-06-17.