Cms Made Simple Security Vulnerabilities and Issues — Cms Made Simple CVE List

Lucene search

CmsmadesimpleCms Made Simple

3 matches found

CVE•added 2017/11/10 11:29 p.m.•67 views

CVE-2017-16783

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.

9.8CVSS9.6AI score0.16935EPSS

CVE•added 2017/11/10 11:29 p.m.•44 views

CVE-2017-16784

In CMS Made Simple 2.2.2, there is Reflected XSS via the cntnt01detailtemplate parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2017/11/12 6:29 p.m.•42 views

CVE-2017-16798

In CMS Made Simple 2.2.3.1, the is_file_acceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .ph...

5.4CVSS5.2AI score0.0027EPSS