Approved changes feed: RSS · Atom

cpe:2.3:a:cmsimple:cmsimple:5.2:*:*:*:*:*:*:*

part: a version: 5.2 update: *

VendorCmsimple (f2c7c4cc-d0b2-5953-ab3b-92edfc4bef64)
ProductCmsimple (fc4552ca-806b-522d-9087-0b34b3e6cbdb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47732 vulnerable 2026-06-08 05:38:07.526622 CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
MEDIUM (6.1)
CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that allows attackers to inject malicious JavaScript. Attackers can place unfiltered JavaScript code that executes when users click on Page or Files tabs, enabling persistent script injection.
Published: 2025-12-23T19:34:07.775Z
Updated: 2026-04-07T14:05:50.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.