CVE-2026-53952 debrief based on the supplied source corpus. The CVE record was published on 2026-09-11T20:17:14.060Z and has not been modified since then. This critical vulnerability in GetSimple CMS and GetSimple CMS CE allows unauthenticated attackers to create new administrator accounts due to a logic flaw. Affected versions include GetSimple CMS (v3.4.0a and below) and GetSimpleCMS-CE (v3.3.22 and bel [truncated]
CVE-2026-26351 is a stored cross-site scripting (XSS) vulnerability affecting GetSimpleCMS Community Edition (CE) versions prior to 3.3.22. The vulnerability exists in the Theme to Components functionality within components.php, where user-supplied input provided to the 'slug' field of a component is stored without proper output encoding. Authenticated administrators can inject malicious script content th [truncated]
