Cmsmadesimple

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-36969 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 6, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.
CVE-2021-28999 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 May 8, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 SQL Injection vulnerability in CMS Made Simple through 2.2.15 allows remote attackers to execute arbitrary commands via the m1_sortby parameter to modules/News/function.admin_articlestab.php.
CVE-2021-28998 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 May 8, 2023 N/A· v4 7.2 HIGH· v3 N/A· v2 File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.
CVE-2021-40961 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jun 9, 2022 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using t...Show more CMS Made Simple <=2.2.15 is affected by SQL injection in modules/News/function.admin_articlestab.php. The $sortby variable is concatenated with $query1, but it is possible to inject arbitrary SQL language without using the '.Show less
CVE-2021-43154 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Apr 13, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.
CVE-2022-23907 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Feb 28, 2022 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
CVE-2022-23906 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Feb 28, 2022 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
CVE-2020-23481 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Sep 22, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.
CVE-2019-9060 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Sep 17, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename parameter; and throug...Show more An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setdefaulttemplate.php) with the m1_filename parameter; and through the action.showmessage.php file, it is possible to read arbitrary file content (by using that path traversal with m1_prefname set to cg_errormsg and m1_resettodefault=1).Show less
CVE-2020-22732 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Aug 5, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..
CVE-2020-23241 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 26, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature.
CVE-2020-23240 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 26, 2021 N/A· v4 4.8 MEDIUM· v3 3.5 LOW· v2 Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature.
CVE-2020-36416 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Design" parameter under...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Design" parameter under the "Designs" module.Show less
CVE-2020-36415 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter un...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module.Show less
CVE-2020-36414 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "URL (slug)" or "Extra" fields under t...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "URL (slug)" or "Extra" fields under the "Add Article" feature.Show less
CVE-2020-36413 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP addresses from the "...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP addresses from the "Site Down" status" parameter under the "Maintenance Mode" module.Show less
CVE-2020-36412 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin S...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin Search" module.Show less
CVE-2020-36411 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {page_image} tag:" or "P...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {page_image} tag:" or "Path for thumbnail field:" parameters under the "Content Editing Settings" module.Show less
CVE-2020-36410 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the "Options" module.Show less
CVE-2020-36409 1Cmsmadesimple 1Cms Made Simple Jun 17, 2026 Jul 2, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Ca...Show more A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Categories" module.Show less

Previous 123 4 5...8 Next