CVE-2019-9056

2019-04-1119:26:42

mitre

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted FEU cookie, and achieve authenticated object injection.