CVE-2026-78834

A code execution vulnerability in the CoAuthors plugin of CMSimple 5.22 allows an authenticated low-privileged user with page-content modification rights to trigger server-side execution by referencing crafted external or uploaded text content through the content import feature. The CNA-assigned ...