GetSimpleCMS <=3.3.15 has an open redirect in admin/changedata.php via the redirect function to the url parameter.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-18660.json"