Cmsmadesimple CMS Made Simple 2.2.18
Approved changes feed: RSS · Atom
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.18:*:*:*:*:*:*:*
part: a version: 2.2.18 update: *
| Vendor | Cmsmadesimple (8ed73986-e506-5acb-a027-f2d81aed9376) |
|---|---|
| Product | Cms Made Simple (3c989cef-25f4-5ecb-b903-28c284166358) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:cmsmadesimple/cmsmadesimple |
purl2cpe | 2026-06-01 10:12:04.294425 |
pkg:github/cmsmadesimple/cmsmadesimple-2-0 |
purl2cpe | 2026-06-01 10:12:04.294426 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-43872 |
vulnerable | 2026-06-08 06:12:38.130549 |
Details available
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
Published: 2023-09-28T00:00:00.000Z
Updated: 2024-09-23T19:18:39.891Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43360 |
vulnerable | 2026-06-08 06:11:11.153713 |
Details available
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component.
Published: 2023-10-24T00:00:00.000Z
Updated: 2024-09-11T18:19:27.553Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43359 |
vulnerable | 2026-06-08 06:11:11.153405 |
Details available
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data parameters in the Content Manager Menu component.
Published: 2023-10-19T00:00:00.000Z
Updated: 2024-09-12T19:52:44.832Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43358 |
vulnerable | 2026-06-08 06:11:11.152946 |
Details available
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component.
Published: 2023-10-23T00:00:00.000Z
Updated: 2024-09-12T15:39:51.927Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43357 |
vulnerable | 2026-06-08 06:11:11.152634 |
Details available
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component.
Published: 2023-10-20T00:00:00.000Z
Updated: 2024-09-12T14:50:18.286Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43356 |
vulnerable | 2026-06-08 06:11:11.152216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43355 |
vulnerable | 2026-06-08 06:11:11.151891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43354 |
vulnerable | 2026-06-08 06:11:11.151589 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43353 |
vulnerable | 2026-06-08 06:11:11.151106 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43352 |
vulnerable | 2026-06-08 06:11:11.150799 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43339 |
vulnerable | 2026-06-08 06:11:11.144455 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37238 |
vulnerable | 2026-06-08 05:25:50.382467 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.