Vulnerability index

Browse CVEs

74 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

File Manager HIGH 7.2
CVE-2025-63678

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers wi…

No fix yet
Fix from $1,950 2025-11-10
Cms Made Simple MEDIUM 6.1
CVE-2024-1528

CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /…

Mitigation only
Fix from $1,600 2024-03-12
Cms Made Simple MEDIUM 6.1
CVE-2024-1529

Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerab…

Mitigation only
Fix from $1,600 2024-03-12
Cms Made Simple HIGH 8.8
CVE-2024-1527

Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the se…

Mitigation only
Fix from $1,950 2024-03-12
Cms Made Simple HIGH 7.2
CVE-2024-27622

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerabil…

No fix yet
Fix from $1,950 2024-03-05
Cms Made Simple MEDIUM 5.9
CVE-2024-27623

CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particular…

No fix yet
Fix from $1,600 2024-03-05
Cms Made Simple HIGH 7.8
CVE-2023-43352

An issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Content Manager Menu component.

No fix yet
Fix from $1,950 2023-10-26
Cms Made Simple MEDIUM 5.4
CVE-2023-43360

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Direct…

No fix yet
Fix from $1,600 2023-10-25
Cms Made Simple MEDIUM 5.4
CVE-2023-43358

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title para…

No fix yet
Fix from $1,600 2023-10-23
Cms Made Simple MEDIUM 5.4
CVE-2023-43353

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra para…

No fix yet
Fix from $1,600 2023-10-20
Cms Made Simple MEDIUM 5.4
CVE-2023-43354

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles p…

No fix yet
Fix from $1,600 2023-10-20
Cms Made Simple MEDIUM 5.4
CVE-2023-43355

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password a…

No fix yet
Fix from $1,600 2023-10-20
Cms Made Simple MEDIUM 5.4
CVE-2023-43356

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Global Mea…

No fix yet
Fix from $1,600 2023-10-20
Cms Made Simple MEDIUM 5.4
CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title para…

No fix yet
Fix from $1,600 2023-10-20
Cms Made Simple MEDIUM 5.4
CVE-2023-43359

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Speci…

No fix yet
Fix from $1,600 2023-10-19
Cms Made Simple MEDIUM 5.4
CVE-2023-43872

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

No fix yet
Fix from $1,600 2023-09-28
Cms Made Simple MEDIUM 6.1
CVE-2023-43339

Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected i…

No fix yet
Fix from $1,600 2023-09-25
Cms Made Simple MEDIUM 5.4
CVE-2023-36970

A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upl…

No fix yet
Fix from $1,600 2023-07-06
Cms Made Simple HIGH 8.8
CVE-2023-36969EPSS 49%

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.

No fix yet
Fix from $1,950 2023-07-06
Cms Made Simple MEDIUM 6.1
CVE-2021-43154

Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.

Mitigation only
Fix from $1,600 2022-04-13
Cms Made Simple HIGH 7.2
CVE-2022-23906

CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability i…

No fix yet
Fix from $1,950 2022-02-28
Cms Made Simple MEDIUM 6.1
CVE-2022-23907

CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.

No fix yet
Fix from $1,600 2022-02-28
Cms Made Simple MEDIUM 5.4
CVE-2020-23481

CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts o…

No fix yet
Fix from $1,600 2021-09-22
Cms Made Simple HIGH 7.5
CVE-2019-9060

An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file ac…

Mitigation only
Fix from $1,950 2021-09-17
Cms Made Simple MEDIUM 5.4
CVE-2020-36416

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02
Cms Made Simple MEDIUM 5.4
CVE-2020-36408

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02
Cms Made Simple MEDIUM 5.4
CVE-2020-36409

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02
Cms Made Simple MEDIUM 5.4
CVE-2020-36410

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02
Cms Made Simple MEDIUM 5.4
CVE-2020-36411

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02
Cms Made Simple MEDIUM 5.4
CVE-2020-36412

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a …

No fix yet
Fix from $1,600 2021-07-02