CVE-2023-6188

A vulnerability was found in GetSimpleCMS 3.3.16/3.4.0a. It has been rated as critical. This issue affects some unknown processing of the file /admin/theme-edit.php. The manipulation leads to code injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-245735.

• CWE-94

• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352Exploit
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1358Exploit
• https://vuldb.com/?ctiid.245735Permissions Required
• https://vuldb.com/?id.245735Third Party Advisory
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1352Exploit
• https://github.com/GetSimpleCMS/GetSimpleCMS/issues/1358Exploit
• https://vuldb.com/?ctiid.245735Permissions Required
• https://vuldb.com/?id.245735Third Party Advisory

Published

Nov 17, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-6180The tokio-boring library in version 4.0.0 is affected by a m…5.3
• CVE-2023-6181An oversight in BCB handling of reboot reason that allows fo…9.8
• CVE-2023-6184Cross SiteScripting vulnerability in Citrix Session Recordin…7.2
• CVE-2023-6185Improper Input Validation vulnerability in GStreamer integra…8.8
• CVE-2023-6186Insufficient macro permission validation of The Document Fou…8.8
• CVE-2023-6187The Paid Memberships Pro plugin for WordPress is vulnerable …8.8
• CVE-2023-6189Missing access permissions checks in the M-Files server be…5.3
• CVE-2023-6190Improper Limitation of a Pathname to a Restricted Directory …9.8
• CVE-2023-6191Improper Neutralization of Special Elements used in an SQL C…9.8
• CVE-2023-6193quiche v. 0.15.0 through 0.19.0 was discovered to be vulnera…5.3
• CVE-2023-6194In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report de…7.1
• CVE-2023-6195An issue has been discovered in GitLab CE/EE affecting all v…4.3