Skip to content
Noroxi

Cmsimple records

20 published records for vendor cmsimple.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 22
  3. 24
  4. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

20 records
  • CVE-2021-43741
    40Plan

    CMSimple 5.4 is vulnerable to Directory Traversal.

    CriticalCVSS 9.8No exploitEPSS 5%

    cmsimple · cmsimpleApr 13, 2022

  • CVE-2024-57548
    36Monitor

    CMSimple 5.16 allows the user to edit log.php file via print page.

    CriticalCVSS 9.1No exploitEPSS 0%

    cmsimple · cmsimpleJan 27, 2025

  • CVE-2024-58280
    34Monitor

    CMSimple 5.15 Remote Command Execution via Extensions Configuration

    HighCVSS 8.6No exploitEPSS 1%

    cmsimple · cmsimpleDec 10, 2025

  • CVE-2021-47735
    34Monitor

    CMSimple 5.4 Authenticated Remote Code Execution via Template Editing

    HighCVSS 8.6No exploitEPSS 1%

    cmsimple · cmsimpleDec 23, 2025

  • CVE-2021-47734
    34Monitor

    CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution

    HighCVSS 8.6No exploitEPSS 1%

    cmsimple · cmsimpleDec 23, 2025

  • CVE-2008-2650
    33Monitor

    Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include

    MediumCVSS 6.8Proof of conceptEPSS 19%

    cmsimple · cmsimpleJun 10, 2008

  • CVE-2024-57549
    30Monitor

    CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request.

    HighCVSS 7.5No exploitEPSS 1%

    cmsimple · cmsimpleJan 27, 2025

  • CVE-2024-57546
    30Monitor

    An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the validate link function.

    HighCVSS 7.5No exploitEPSS 1%

    cmsimple · cmsimpleJan 27, 2025

  • CVE-2024-57547
    30Monitor

    Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the F

    HighCVSS 7.5No exploitEPSS 1%

    cmsimple · cmsimpleJan 27, 2025

  • CVE-2024-33423
    29Monitor

    Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML vi

    HighCVSS 7.4No exploitEPSS 1%

    cmsimple · cmsimpleMay 1, 2024

  • CVE-2024-32345
    28Monitor

    A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML

    HighCVSS 7.2No exploitEPSS 0%

    cmsimple · cmsimpleApr 17, 2024

  • CVE-2024-32344
    27Monitor

    A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML

    MediumCVSS 6.8No exploitEPSS 1%

    cmsimple · cmsimpleApr 17, 2024

  • CVE-2024-33424
    24Monitor

    A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML

    MediumCVSS 6.1No exploitEPSS 0%

    cmsimple · cmsimpleMay 1, 2024

  • CVE-2021-43742
    21Monitor

    CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.

    MediumCVSS 5.4No exploitEPSS 1%

    cmsimple · cmsimpleApr 13, 2022

  • CVE-2021-47732
    20Monitor

    CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input

    MediumCVSS 5.1No exploitEPSS 0%

    cmsimple · cmsimpleDec 23, 2025

  • CVE-2021-47733
    20Monitor

    CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding

    MediumCVSS 5.1No exploitEPSS 0%

    cmsimple · cmsimpleDec 23, 2025

  • CVE-2018-19508
    19Monitor

    CMSimple 4.7.5 has XSS via an admin's upload of an SVG file at a ?userfiles&subdir=userfiles/images/flags/ URI.

    MediumCVSS 4.8No exploitEPSS 1%

    cmsimple · cmsimpleDec 19, 2018

  • CVE-2018-19507
    19Monitor

    CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI.

    MediumCVSS 4.8No exploitEPSS 1%

    cmsimple · cmsimpleDec 19, 2018

  • CVE-2024-32392
    18Monitor

    Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.

    MediumCVSS 4.5No exploitEPSS 1%

    cmsimple · cmsimpleApr 19, 2024

  • CVE-2014-2219
    17Monitor

    Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26

    MediumCVSS 4.3No exploitEPSS 1%

    cmsimple · cmsimple classicMar 20, 2014