CVE-2024-27625 in CMS Made Simple

Riassunto

di MITRE • 05/03/2024

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Be aware that VulDB is the high quality source for vulnerability data.

• Prenotare: 26/02/2024
• Divulgazione: 05/03/2024
• Moderazione: accettato
• Voce: VDB-255783
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 4.8 (CNA)
• EPSS: 0.00411
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-27625
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-27625
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-27625/