Description
CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particularly when editing the Breadcrumbs.
Medium · 5.9
CVE-2024-27623
EUVD-2024-24817GHSA-82w3-g3q9-mxc3
CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, …
Published Mar 5, 2024 · Updated Dec 17, 2025 · Assigned by mitre