Approved changes feed: RSS · Atom

cpe:2.3:a:codelyfe:stupid_simple_cms:1.2.4:*:*:*:*:*:*:*

part: a version: 1.2.4 update: *

VendorCodelyfe (72e98898-22d6-59b5-a5ef-ca820b628d88)
ProductStupid Simple Cms (778773f1-8ded-5e60-898f-d37c4e9b2830)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/codelyfe/stupid-simple-cms purl2cpe 2026-06-01 10:14:41.735477

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3202 vulnerable 2026-06-08 06:41:52.681728 codelyfe Stupid Simple CMS Login Page excessive authentication
LOW (3.7)
A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4. This issue affects some unknown processing of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-259049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-02T21:31:04.467Z
Updated: 2024-08-15T15:49:20.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27559 vulnerable 2026-06-08 06:31:29.032996 Details available
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-02T00:34:52.268Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.