CVE-2024-27625 in CMS Made Simple

Zusammenfassung

von MITRE • 05.03.2024

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservieren: 26.02.2024
• Veröffentlichung: 05.03.2024
• Moderieren: akzeptiert
• Eintrag: VDB-255783
• CPE: bereit
• CWE: CWE-79 (bestätigt)
• CVSS: 4.8 (CNA)
• EPSS: 0.00411
• KEV: nein
• Aktivitäten: very low
• Sektor: Hostingprovider, Lawfirm, ...

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-27625
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-27625
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-27625/