A vulnerability labeled as problematic has been found in GetSimple CMS up to 3.3.22. This issue affects some unknown processing of the component Administrative File Upload Endpoint. Such manipulation leads to cross-site request forgery.
This vulnerability is uniquely identified as CVE-2026-27146. The attack can be launched remotely. No exploit exists.
