cmsimple vulnerabilities

CVEs whose affected-version data names the cmsimple package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2024-58280High· 8.8

9mo ago

CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files

CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script t…

▾ Twilightcmsimple · cmsimpleEPSS 0.94%via NVD