High

DATE	CVE	VULNERABILITY TITLE	RISK
2018-09-16	CVE-2018-17103	Cross-Site Request Forgery (CSRF) vulnerability in Get-Simple Getsimple CMS 3.3.13 An issue was discovered in GetSimple CMS v3.3.13. network low complexity get-simple CWE-352	8.8
2017-03-17	CVE-2014-8722	Information Exposure vulnerability in Get-Simple Getsimple CMS 3.3.4 GetSimple CMS 3.3.4 allows remote attackers to obtain sensitive information via a direct request to (1) data/users/<username>.xml, (2) backups/users/<username>.xml.bak, (3) data/other/authorization.xml, or (4) data/other/appid.xml. network low complexity get-simple CWE-200	7.5