CMS Made Simple vulnerabilities
2 known vulnerabilities in CMS Made Simple from Cmsmadesimple. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest first
- 7.2 High severity
cms_made_simple: Failure to Sanitize Special Elements into a Different Plane
A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result
- 7.2 High severity
CMS Made Simple: Unrestricted Upload of File with Dangerous Type
CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.