254 matches found
PT-2024-24524 · Cmsimple · Cmsimple
Name of the Vulnerable Software and Affected Versions: CMSimple version 5.15 Description: A cross-site scripting XSS vulnerability in the Settings menu allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language...
CMSimple 安全漏洞
CMSimple is a free content management system. A security vulnerability exists in CMSimple v5.15, which stems from a cross-site scripting XSS vulnerability in the Settings menu. An attacker can exploit this vulnerability to execute arbitrary web script or HTML code by injecting a payload into the...
CVE-2024-32345
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section...
CVE-2024-32344
A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...
CMSimple 安全漏洞
CMSimple is a free content management system. A security vulnerability exists in CMSimple v5.15, which stems from a cross-site scripting XSS vulnerability in the Settings menu. An attacker can exploit this vulnerability to execute arbitrary web script or HTML code by injecting a payload into the...
CVE-2024-32344
CMSimple v5.15 is affected by an XSS in the Settings menu, via crafted input in the Language section Edit parameter. The vulnerability arises from insufficient filtering/escaping of user-supplied data in that parameter, enabling arbitrary script/HTML execution. In-the-wild details are not provide...
CMSimple Cross-Site Scripting Vulnerability (CNVD-2022-71403)
CMSimple is a free content management system. version 5.4 of CMSimple contains a cross-site scripting vulnerability that stems from the program's lack of data validation filtering of user-supplied data and output. An attacker could exploit this vulnerability to execute JavaScript code on the clie...
CMSimple Directory Traversal Vulnerability
CMSimple is a PHP and HTML based content management system that helps users to quickly create simple and easy to use websites. CMSimple suffers from a directory traversal vulnerability that stems from a failure of a web-based system or product to properly filter for special elements in the path o...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
Directory traversal
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution...
CVE-2021-43741
CVE-2021-43741 affects CMSimple 5.4 and is reported as a directory traversal vulnerability that can lead to remote code execution by altering the filename of config.php to a malicious file. The issue arises from insufficient filtering of path elements. Connected sources (CNVD-2026-02660, NVD/NVD ...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
Cross site scripting
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross Site Scripting XSS via the file upload feature...
CVE-2021-43742
CMSimple 5.4 is vulnerable to Cross-Site Scripting (XSS) via the file upload feature. The root cause is a lack of data validation/filtering of user-supplied data, enabling injected JavaScript on the client side. Impact and exploit details are limited to the public descriptions; no explicit in-the...