CVE-2024-27623

CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI) (CWE-1336) within the Design Manager component, specifically when editing the Breadcrumbs . This vulnerability allows for the improper neutralization of special elements used in a template engine. Practical cons...