Cmsmadesimple vulnerabilities

Products

• Cms Made Simple 154
• Cms Made Simple 7
• Form Builder 3
• Cmsmadesimple 2

Newest

• cmsmadesimple cms made simple CMS Made Simple 2.2.15 Stored XSS via SVG File Upload CVE-2020-37238 5.1 MediumMay 16, 2026
• cmsmadesimple cms made simple CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal CVE-2026-5203 Public exploit 5.1 MediumMarch 31, 2026
• cmsmadesimple cms made simple CMS Made Simple User Management listusers.php cross site scripting CVE-2026-4225 4.8 MediumMarch 16, 2026
• cmsmadesimple file manager An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple... CVE-2025-63678 7.2 HighNovember 10, 2025
• cmsmadesimple cms made simple CMS Made Simple Design Manager Module cross site scripting CVE-2025-5153 5.1 MediumMay 25, 2025
• cms made simple made simple, cmsmadesimple cms made simple +1 more Cross-site Scripting in CMS Made Simple CVE-2024-1529 7.4 HighMarch 12, 2024
• cms made simple made simple, cmsmadesimple cms made simple +1 more Cross-site Scripting in CMS Made Simple CVE-2024-1528 7.4 HighMarch 12, 2024
• cms made simple made simple, cmsmadesimple cms made simple, cmsmadesimple +2 more Unrestricted Upload of File with Dangerous Type in CMS Made Simple CVE-2024-1527 9.8 CriticalMarch 12, 2024
• cmsmadesimple cms made simple CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability... CVE-2024-27625 4.8 MediumMarch 5, 2024
• cmsmadesimple cms made simple CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The... CVE-2024-27623 5.9 MediumMarch 5, 2024
• cmsmadesimple cms made simple A remote code execution vulnerability has been identified in the User Defined Tags module of CMS... CVE-2024-27622 7.2 HighMarch 5, 2024
• cmsmadesimple cms made simple An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a... CVE-2023-43352 Public exploit 7.8 HighOctober 26, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43360 Public exploit 5.4 MediumOctober 24, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43358 Public exploit 5.4 MediumOctober 23, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43357 Public exploit 5.4 MediumOctober 20, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43356 Public exploit 5.4 MediumOctober 20, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43355 Public exploit 5.4 MediumOctober 20, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43354 Public exploit 5.4 MediumOctober 20, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43353 Public exploit 5.4 MediumOctober 20, 2023
• cmsmadesimple cms made simple Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute... CVE-2023-43359 Public exploit 5.4 MediumOctober 19, 2023
• cmsmadesimple cms made simple A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf... CVE-2023-43872 Public exploit 5.4 MediumSeptember 28, 2023
• cmsmadesimple cms made simple Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to... CVE-2023-43339 Public exploit 6.1 MediumSeptember 25, 2023
• cmsmadesimple cms made simple A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to... CVE-2023-36970 5.4 MediumJuly 6, 2023
• cmsmadesimple cms made simple CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function. CVE-2023-36969 Public exploit EPSS 49.3% 8.8 HighJuly 6, 2023
• cmsmadesimple cms made simple SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute... CVE-2021-28999 8.8 HighMay 8, 2023
• cmsmadesimple cms made simple File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers... CVE-2021-28998 7.2 HighMay 8, 2023
• cmsmadesimple cms made simple CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab... CVE-2021-40961 8.8 HighJune 9, 2022
• cmsmadesimple cms made simple Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in... CVE-2021-43154 6.1 MediumApril 13, 2022
• cmsmadesimple cms made simple CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS)... CVE-2022-23907 6.1 MediumFebruary 28, 2022
• cmsmadesimple cms made simple CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability... CVE-2022-23906 7.2 HighFebruary 28, 2022
• cmsmadesimple cms made simple CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which... CVE-2020-23481 5.4 MediumSeptember 22, 2021
• cmsmadesimple cms made simple An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path... CVE-2019-9060 7.5 HighSeptember 17, 2021
• cmsmadesimple cms made simple CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker.. CVE-2020-22732 4.8 MediumAugust 5, 2021
• cmsmadesimple cms made simple Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article... CVE-2020-23241 4.8 MediumJuly 26, 2021
• cmsmadesimple cms made simple Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the... CVE-2020-23240 4.8 MediumJuly 26, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36416 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36415 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36414 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36413 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36412 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36411 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36410 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36409 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated... CVE-2020-36408 5.4 MediumJuly 2, 2021
• cmsmadesimple cms made simple A cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the ... CVE-2020-27377 4.8 MediumJune 1, 2021
• cmsmadesimple cms made simple CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script... CVE-2021-28935 Public exploit 5.4 MediumMarch 30, 2021
• cmsmadesimple cms made simple Cross Site Scripting (XSS) vulnerability in the Showtime2 Slideshow module in CMS Made Simple ... CVE-2020-20138 6.1 MediumDecember 17, 2020
• cmsmadesimple cms made simple CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit... CVE-2020-24860 5.4 MediumOctober 1, 2020
• cmsmadesimple cms made simple CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager... CVE-2020-22842 5.4 MediumSeptember 30, 2020
• cmsmadesimple cms made simple CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does... CVE-2020-17462 7.8 HighAugust 14, 2020
• Show olderLoading…