Stupid Simple Cms

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:codelyfe:stupid_simple_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodelyfe (72e98898-22d6-59b5-a5ef-ca820b628d88)
ProductStupid Simple Cms (778773f1-8ded-5e60-898f-d37c4e9b2830)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/codelyfe/stupid-simple-cms purl2cpe 2026-06-01 10:14:41.735470

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-3202 vulnerable 2026-06-08 06:41:52.682548 codelyfe Stupid Simple CMS Login Page excessive authentication
LOW (3.7)
A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4. This issue affects some unknown processing of the component Login Page. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-259049 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2024-04-02T21:31:04.467Z
Updated: 2024-08-15T15:49:20.020Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27689 vulnerable 2026-06-08 06:31:29.112724 Details available
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-08T20:46:04.434Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27559 vulnerable 2026-06-08 06:31:29.033176 Details available
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php
Published: 2024-03-01T00:00:00.000Z
Updated: 2024-08-02T00:34:52.268Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27558 vulnerable 2026-06-08 06:31:29.031414 Details available
Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.
Published: 2024-03-01T00:00:00.000Z
Updated: 2025-04-22T15:45:12.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22715 vulnerable 2026-06-08 06:29:35.992285 Details available
Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.
Published: 2024-01-17T00:00:00.000Z
Updated: 2025-06-20T20:49:14.254Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22714 vulnerable 2026-06-08 06:29:35.991722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7041 vulnerable 2026-06-08 06:21:56.836580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7040 vulnerable 2026-06-08 06:21:56.836136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6907 vulnerable 2026-06-08 06:21:56.245369 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6902 vulnerable 2026-06-08 06:21:56.235066 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6901 vulnerable 2026-06-08 06:21:56.234554 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.