Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-1527 EUVD-2024-17275GHSA-48xv-cpgv-hr4q

Unrestricted Upload of File with Dangerous Type in CMS Made Simple

Published Mar 12, 2024 · Updated Aug 8, 2024 · Assigned by INCIBE

Description

Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the security measures of the upload functionality and potentially create a remote execution of commands via webshell.

Affected products

VendorProductAffectedFixed
CMS Made Simple CMS Made Simple 2.2.14 —

References