Cms Made Simple Security Vulnerabilities and Issues — Page 4 of Cms Made Simple CVE List

Lucene search

CmsmadesimpleCms Made Simple

154 matches found

CVE•added 2021/08/05 5:15 p.m.•28 views

CVE-2020-22732

CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..

4.8CVSS4.8AI score0.00533EPSS

CVE•added 2023/05/08 2:15 p.m.•28 views

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.

7.2CVSS6.7AI score0.00307EPSS

CVE•added 2020/09/30 6:15 p.m.•27 views

CVE-2020-22842

CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php.

5.4CVSS5.2AI score0.00374EPSS

CVE•added 2023/07/06 3:15 p.m.•26 views

CVE-2023-36970

A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function.

5.4CVSS5.4AI score0.0011EPSS

Total number of security vulnerabilities154