Skip to contentCmsmadesimple vulnerabilities
Newest
- cmsmadesimple cms made simpleCMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact...CVE-2020-149265.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple through 2.2.14 allows XSS via a crafted File Picker profile name.CVE-2020-136604.8 Medium
- cmsmadesimple cms made simpleThe Filemanager in CMS Made Simple 2.2.13 allows remote code execution via a .php.jpegd JPEG file...CVE-2020-106827.8 High
- cmsmadesimple cms made simpleThe Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by...CVE-2020-106815.4 Medium
- the cms made simple foundation cmsms, cmsmadesimple cms made simple +1 moreThe news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.CVE-2011-43107.5 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the ...CVE-2019-176294.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the ...CVE-2019-176304.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.11 allows XSS via the Site Admin > Module Manager > Search Term field.CVE-2019-172264.8 Medium
- babel, cmsmadesimple bable\ +1 moreBabel: Multilingual site Babel All is affected by: Open Redirection. The impact is: Redirection...CVE-2019-10102906.1 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the m1_name parameter in "Add Article" under Content ->...CVE-2019-112265.4 Medium
- cmsmadesimple cms made simpleThe File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in...CVE-2019-115134.8 Medium
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class...CVE-2019-90568.8 High
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable...CVE-2019-101075.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via...CVE-2019-101065.4 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field,...CVE-2019-101055.4 Medium
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action...CVE-2019-90618.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. It is possible, with an administrator account,...CVE-2019-90597.2 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm...CVE-2019-90587.2 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module FilePicker, it is possible to...CVE-2019-90578.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. In the module DesignManager (in the files...CVE-2019-9055Public exploitEPSS 12.3%8.8 High
- cmsmadesimple cms made simpleAn issue was discovered in CMS Made Simple 2.2.8. It is possible with the News module, through a...CVE-2019-9053Public exploitEPSS 68.6%8.1 High
- cmsmadesimple cms made simpleCMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an ...CVE-2019-100175.4 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) before 2.2.10, an authenticated user can achieve SQL Injection in...CVE-2019-96938.8 High
- cmsmadesimple cms made simpleclass.showtime2_image.php in CMS Made Simple (CMSMS) before 2.2.10 does not ensure that a...CVE-2019-9692Public exploitEPSS 45.9%6.5 Medium
- cmsmadesimple cms made simpleThere is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This...CVE-2018-204646.1 Medium
- cmsmadesimple cms made simpleCMS Made Simple 2.2.8 allows XSS via an uploaded SVG document, a related issue to CVE-2017-16798.CVE-2018-195974.8 Medium
- cmsmadesimple cms made simpleXSS exists in CMS Made Simple version 2.2.7 via the m1_extra parameter in an admin...CVE-2018-182716.1 Medium
- cmsmadesimple cms made simpleXSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin...CVE-2018-182706.1 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains a physical path leakage Vulnerability via /modules...CVE-2018-105235.3 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file view" operation in the admin dashboard...CVE-2018-105224.9 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file move" operation in the admin dashboard...CVE-2018-105212.7 Low
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard...CVE-2018-105206.5 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) 2.2.7 contains a privilege escalation vulnerability from ordinary user to...CVE-2018-105198.8 High
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file delete" operation in the admin dashboard...CVE-2018-105186.5 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "module import" operation in the admin dashboard...CVE-2018-10517Public exploitEPSS 11.5%7.2 High
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file rename" operation in the admin dashboard...CVE-2018-105166.5 Medium
- cmsmadesimple cms made simpleIn CMS Made Simple (CMSMS) through 2.2.7, the "file unpack" operation in the admin dashboard...CVE-2018-105157.2 High
- cmsmadesimple cms made simpleIn CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the...CVE-2018-99215.3 Medium
- cmsmadesimple cms made simplecmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of...CVE-2018-10001588.8 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the...CVE-2018-100867.2 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 allows PHP object injection because of an unserialize call...CVE-2018-100859.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary...CVE-2018-100848.8 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the...CVE-2018-100837.5 High
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page...CVE-2018-100825.3 Medium
- cmsmadesimple cms made simpleCMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data...CVE-2018-100819.8 Critical
- cmsmadesimple cms made simpleCMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter.CVE-2018-100334.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the...CVE-2018-100324.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/moduleinterface.php.CVE-2018-100318.8 High
- cmsmadesimple cms made simpleCMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.CVE-2018-100308.8 High
- cmsmadesimple cms made simpleCMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name...CVE-2018-100294.8 Medium
- Show moreLoading…