CVE-2024-34452

CVE-2024-34452 - Cross-Site Scripting XSS Schwachstelle in CMSimpleXH Übersicht Eine Cross-Site Scripting XSS Schwachstelle wurde in CMSimpleXH Version 1.7.6 identifiziert. Diese Schwachstelle erlaubt autorisierten Benutzern, SVG-Dateien mit schädlichem JavaScript-Code hochzuladen. Das Problem...

CVE-2025-63588

CVE-2025-63588 CMSimpleXH cmsimplexh पथ हैंडलिंग में परावर्तित क्रॉस-साइट स्क्रिप्टिंग XSS अनुमानित CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N → 6.1 मध्यम निर्धारित CVE: CVE-2025-63588 उत्पाद: CMSimpleXH - 1.8 विक्रेता: CMSimpleXH - https://www.cmsimple-xh.org/ सारांश CMSimpleXH के फ्रंट-राउट...

CVE-2025-63589

CVE-2025-63589 XSS riflesso nella gestione del percorso di index.php di CMSimpleXH Scoperto: 6 ottobre 2025 Prodotti: CMSimpleXH CMS open-source flat-file Versioni interessate: 1.8 CVE: CVE-2025-63589 Autenticazione richiesta: Nessuna senza autenticazione Tipo di attacco: Cross-Site Scripting...

CVE-2024-34452

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

CMSimple_XH Code Execution Vulnerability

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a code execution vulnerability that stems from the content editing functionality not securely restricting or filtering code input when...

CVE-2021-47736

CMSimpleXH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitra...

CVE-2021-47736 CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing

CMSimpleXH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitra...

CMSimple_XH 代码注入漏洞

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a code execution vulnerability that stems from the content editing functionality not securely restricting or filtering code input when...

CMSimple_XH Cross-Site Scripting Vulnerability

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from not cleaning or coding path segments under the control of an attacker, no details of the...

CMSimple_XH cross-site scripting vulnerability (CNVD-2026-02642)

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, for...

CMSimple_XH 安全漏洞

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from not cleaning or coding path segments under the control of an attacker, no details of the...

CVE-2025-63589

CMSimple_XH 1.8 is affected by a reflected XSS in the index.php router: attacker-controlled path segments are not sanitized/encoded before being inserted into generated HTML (navigation links, breadcrumbs, search form action, footer links), allowing arbitrary JavaScript in victims’ browsers via a...

EUVD-2021-29609

Malicious code in bioql PyPI...

CMSimple_XH cross-site scripting vulnerability (CNVD-2026-02655)

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, for...

CVE-2024-34452

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

CVE-2024-34452

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

CVE-2024-34452

CMSimple_XH 1.7.6 is affected by CVE-2024-34452, enabling cross-site scripting through uploading a crafted SVG document. Multiple sources describe the issue as a lack of proper filtering/escaping of user input in SVG uploads, leading to XSS in CMSimple_XH. The affected product is a PHP-based CMS....

CVE-2024-34452

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

CVE-2024-34452

CMSimpleXH 1.7.6 allows XSS by uploading a crafted SVG document...

CMSimple_XH Code Execution Vulnerability

CMSimpleXH is a PHP-based content management system derived from the original CMSimple project and belongs to its offshoot version. CMSimpleXH suffers from a code execution vulnerability that can be exploited by an attacker to upload a PHP load using the File parameter to gain privileges from a...