Cmsimple-xh vulnerabilities
We track 2 vulnerabilities in Cmsimple-xh products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on November 6, 2025.
2vulnerabilities
0critical
2high
0exploited
7.1average CVSS score
Latest Cmsimple-xh vulnerabilities
- 7.1 High severity
Cmsimple Xh: Improper Neutralization of Input During Web Page Generation
A reflected XSS vulnerability exists in CMSimple_XH 1.8's index.php router when attacker-controlled path segments are not sanitized or encoded before being inserted into the generated HTML (navigation links, breadcrumbs, search form action, footer links). An a
- 7.1 High severity
Cmsimple Xh: Improper Neutralization of Input During Web Page Generation
An unauthenticated reflected cross-site scripting vulnerability in the query handling of CMSimpleXH allows remote attackers to inject and execute arbitrary JavaScript in a victim's browser via a crafted request (e.g., a maliciously crafted POST login). Success