CVE-2022-41544

GetSimple CMS v3.3.16 was discovered to contain a remote code execution (RCE) vulnerability via the edited_file parameter in admin/theme-edit.php.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v3.1

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

10.41% chance of exploitation in the next 30 days, 95th percentile

Published

2022-10-18

Updated

2025-05-13

Proof-of-concept exploits (6)

• N3rdyN3xus/CVE-2022-415440★ · 2025-06-05
• NyxByt3/CVE-2022-415440★ · 2025-06-05
• Sp3c73rSh4d0w/CVE-2022-415440★ · 2025-06-05
• h3x0v3rl0rd/CVE-2022-415440★ · 2025-06-05
• n3rdh4x0r/CVE-2022-415440★ · 2025-06-05
• yosef0x01/CVE-2022-415441★ · 2023-05-15

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51475

References

• CVE Record
• NVD entry

Related

• CVE-2004-2687
• CVE-2007-2447
• CVE-2009-2265
• CVE-2011-1249
• CVE-2014-0160
• CVE-2015-1635