Skip to content
OpenAdvisories

Vendor

Cmsimple

5 known vulnerabilities.

Cmsimple at a glance

Last 12 months
5
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 3 5 December 2025: 5 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202550
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Cmsimple 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 6.1
    CVE-2021-47733

    CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

    CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when …

    Cmsimple Cmsimple
  • High 8.8
    CVE-2021-47735

    CMSimple 5.4 Authenticated Remote Code Execution via Template Editing

    CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to inject malicious PHP code into template files. Attackers can exploit the template editing functionality by crafting a reverse shell payload and savin…

    Cmsimple Cmsimple
  • High 7.8
    CVE-2021-47734

    CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution

    CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code. Attackers can leverage the vulnerability by changing the functions file path and uploading malic…

    Cmsimple Cmsimple
  • Medium 6.1
    CVE-2021-47732

    CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input

    CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs…

    Cmsimple Cmsimple
  • High 8.6
    CVE-2024-58280

    CMSimple 5.15 Remote Command Execution via Extensions Configuration

    CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script to the media directory …

    Cmsimple Cmsimple