CMSimple 5.19
Approved changes feed: RSS · Atom
cpe:2.3:a:cmsimple:cmsimple:5.19:*:*:*:*:*:*:*
part: a version: 5.19 update: *
| Vendor | Cmsimple (f2c7c4cc-d0b2-5953-ab3b-92edfc4bef64) |
|---|---|
| Product | Cmsimple (fc4552ca-806b-522d-9087-0b34b3e6cbdb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-58280 |
vulnerable | 2026-06-08 06:56:14.337928 |
CMSimple 5.15 Remote Command Execution via Extensions Configuration
CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify file extensions and upload malicious PHP files. Attackers can append ',php' to Extensions_userfiles and upload a shell script to the media directory to execute arbitrary code on the server.
Published: 2025-12-10T21:13:33.152Z
Updated: 2026-04-07T14:08:33.724Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47734 |
vulnerable | 2026-06-08 05:38:07.528603 |
CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
HIGH (7.8)
CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code. Attackers can leverage the vulnerability by changing the functions file path and uploading malicious PHP code through session file upload mechanisms.
Published: 2025-12-23T19:34:08.612Z
Updated: 2026-03-17T16:23:20.378Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-47732 |
vulnerable | 2026-06-08 05:38:07.526000 |
CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
MEDIUM (6.1)
CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs, enabling persistent script injection.
Published: 2025-12-23T19:34:07.775Z
Updated: 2026-04-07T14:05:50.486Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.