Design/Logic Flaw

2018-01-0217:29:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution.

CPENameOperatorVersion
cms_made_simplelt2.2
cms_made_simplege2.2.1

CPE	Name	Operator	Version
	cms_made_simple	lt	2.2
	cms_made_simple	ge	2.2.1

References

www.cmsmadesimple.org/2017/06/Announcing-CMSMS-2-2-1-Hearts-Desire/