CVE-2026-70650

GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated stored Cross-Site Scripting (XSS) vulnerability exists in the page backup viewer (admin/backup-edit.php). Page fields are correctly HTML-encoded when a page is saved, but the backup viewer decodes them again (htmldecode() / strip_decode()) and prints the result without re-escaping. A user who can edit a page can store JavaScript in a page's Keywords, Description, Menu text or Content; it executes in the browser of any administrator who later views that page's backup, in the context of the admin control panel. At time of publication, there are no publicly available patches.

• CWE-79

• https://github.com/GetSimpleCMS-CE/GetSimpleCMS-CE/security/advisories/GHSA-p6vf-2xr7-mcf4

Published

Oct 1, 2026

Last Modified

Oct 5, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-70638llama.cpp builds b1886 through b7445 contain an integer over…7.8
• CVE-2026-70639llama.cpp builds b1886 through b7445 contain a null pointer …5.5
• CVE-2026-7064A flaw has been found in AgentDeskAI browser-tools-mcp up to…7.3
• CVE-2026-70640llama.cpp builds b1886 through b7445 contain a race conditio…7
• CVE-2026-70646aiosend is a synchronous and asynchronous Crypto Pay API cli…7.5
• CVE-2026-7065A vulnerability has been found in BidingCC BuildingAI up to …7.3
• CVE-2026-70651libvips is a fast image processing library with low memory n…6.9
• CVE-2026-70652libvips is a fast image processing library with low memory n…2
• CVE-2026-70653libvips is a fast image processing library with low memory n…4.8
• CVE-2026-70654libvips is a fast image processing library with low memory n…5.8
• CVE-2026-70656Checkmate is an open-source, self-hosted tool designed to tr…4.9
• CVE-2026-70657Copyparty is a portable file server. Prior to 1.20.17, copyp…4.3