CVE-2024-55086: Getsimple-CE Getsimple CMS

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

In the GetSimple CMS CE 3.3.19 management page, Server-Side Request Forgery (SSRF) can be achieved in the plug-in download address in the backend management system.

Affected products

• Getsimple-CE Getsimple CMS: version 3.3.19 only

Published 2024-12-18. Last modified 2026-06-17.