Advisories · Technology
CMS Made Simple.
Every CVE that names CMS Made Simple among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal
- CMS Made Simple
- Path traversal
- CVSS 4.8 Medium
CMS Made Simple User Management listusers.php cross site scripting
- CMS Made Simple
- Cross-site scripting (XSS)
- Code injection
- CVSS 5.1 Medium
CMS Made Simple Design Manager Module cross site scripting
- CMS Made Simple
- Cross-site scripting (XSS)
- Code injection
- CVSS 7.4 High
Cross-site Scripting in CMS Made Simple
- CMS Made Simple
- Cross-site scripting (XSS)
- CVSS 7.4 High
Cross-site Scripting in CMS Made Simple
- CMS Made Simple
- Cross-site scripting (XSS)
- CVSS 9.8 CriticalCritical · CVSS 9+
Unrestricted Upload of File with Dangerous Type in CMS Made Simple
- CMS Made Simple
- Unrestricted file upload