Cmsimple vulnerabilities

Products

• Cmsimple 19

Newest

• cmsimple CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding CVE-2021-47733 5.1 MediumDecember 23, 2025
• cmsimple CMSimple 5.4 Authenticated Remote Code Execution via Template Editing CVE-2021-47735 8.6 HighDecember 23, 2025
• cmsimple CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution CVE-2021-47734 8.6 HighDecember 23, 2025
• cmsimple CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input CVE-2021-47732 5.1 MediumDecember 23, 2025
• cmsimple CMSimple 5.15 Remote Command Execution via Extensions Configuration CVE-2024-58280 8.6 HighDecember 10, 2025
• cmsimple CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in... CVE-2024-57549 7.5 HighJanuary 27, 2025
• cmsimple CMSimple 5.16 allows the user to edit log.php file via print page. CVE-2024-57548 9.1 CriticalJanuary 27, 2025
• cmsimple Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain... CVE-2024-57547 7.5 HighJanuary 27, 2025
• cmsimple An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a... CVE-2024-57546 7.5 HighJanuary 27, 2025
• cmsimple A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows... CVE-2024-33424 6.1 MediumMay 1, 2024
• cmsimple Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers... CVE-2024-33423 7.4 HighMay 1, 2024
• cmsimple Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute... CVE-2024-32392 4.5 MediumApril 19, 2024
• cmsimple A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows... CVE-2024-32345 7.2 HighApril 17, 2024
• cmsimple A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows... CVE-2024-32344 6.8 MediumApril 17, 2024
• cmsimple CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes... CVE-2021-43741 9.8 CriticalApril 13, 2022
• cmsimple CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature. CVE-2021-43742 5.4 MediumApril 13, 2022
• cmsimple CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles... CVE-2018-19508 4.8 MediumDecember 19, 2018
• cmsimple CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI. CVE-2018-19507 4.8 MediumDecember 19, 2018
• cmsimple classic Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier... CVE-2014-2219 4.3 MediumMarch 20, 2014
• cmsimple Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is... CVE-2008-2650 Public exploit EPSS 18.8% 6.8 MediumJune 10, 2008