Description
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
Unscored
CVE-2019-9058
EUVD-2019-18444GHSA-rv28-58vf-v4pv
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted val…
Published Mar 26, 2019 · Updated Aug 4, 2024 · Assigned by mitre