Skip to content
OpenAdvisories

Vendor

Cmsimple

5 known vulnerabilities.

Products

Cmsimple 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2021-47733

    CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

    CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when …

    Cmsimple Cmsimple
  • Medium 6.1
    CVE-2021-47732

    CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input

    CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs…

    Cmsimple Cmsimple