250 matches found
PT-2024-24523 · Cmsimple · Cmsimple
Name of the Vulnerable Software and Affected Versions: CMSimple version 5.15 Description: A cross-site scripting XSS vulnerability in the Settings menu allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
CVE-2024-32344
CMSimple v5.15 is affected by an XSS in the Settings menu, via crafted input in the Language section Edit parameter. The vulnerability arises from insufficient filtering/escaping of user-supplied data in that parameter, enabling arbitrary script/HTML execution. In-the-wild details are not provide...
CMSimple Cross-Site Scripting Vulnerability (CNVD-2022-71403)
CMSimple is a free content management system. version 5.4 of CMSimple contains a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the clie...
CMSimple Directory Traversal Vulnerability
CMSimple is a PHP and HTML based content management system that helps users to quickly create simple and easy to use websites. CMSimple suffers from a directory traversal vulnerability that stems from a failure of a web-based system or product to properly filter for special elements in the path o...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
Directory traversal
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CVE-2021-43741 affects CMSimple 5.4 and is reported as a directory traversal vulnerability that can lead to remote code execution by altering the filename of config.php to a malicious file. The issue arises from insufficient filtering of path elements. Connected sources (CNVD-2026-02660, NVD/NVD ...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
Cross site scripting
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross-Site Scripting (XSS) via the file upload feature. The root cause is a lack of data validation/filtering of user-supplied data, enabling injected JavaScript on the client side. Impact and exploit details are limited to the public descriptions; no explicit in-the...
CMSimple 跨站脚本漏洞
CMSimple is a free content management system. version 5.4 of CMSimple contains a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the clie...
CMSimple 路径遍历漏洞
CMSimple is a PHP and HTML based content management system that helps users to quickly create simple and easy to use websites. CMSimple suffers from a directory traversal vulnerability that stems from a failure of a web-based system or product to properly filter for special elements in the path o...
PT-2022-11905 · Cmsimple · Cmsimple
Name of the Vulnerable Software and Affected Versions: CMSimple version 5.4 Description: The issue is related to Cross Site Scripting XSS via the file upload feature. Recommendations: For CMSimple version 5.4, consider disabling the file upload feature until a patch is available to prevent...
CMSimple 5.4 Cross Site Scripting
Exploit Title: CMSimple 5.4 - Cross Site Scripting XSS Date: 22/10/2021 Exploit Author: heinjame Vendor Homepage: https://www.cmsimple.org/en/ Software Link: https://www.cmsimple.org/en/?Downloads Version: images Upload a file Attack vector '-alert1// need to encode '-alert1// When the victim...