CVE-2024-27625 in CMS Made Simple

Sumário

de MITRE • 05/03/2024

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservar: 26/02/2024
• Divulgação: 05/03/2024
• Moderação: aceite
• Entrada: VDB-255783
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.8 (CNA)
• EPSS: 0.00411
• KEV: não
• Atividades: muito baixo
• Sector: Hostingprovider, Agriculture, ...

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-27625
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-27625
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-27625/