Approved changes feed: RSS · Atom

cpe:2.3:a:cmsmadesimple:file_manager:2.2.22:*:*:*:*:*:*:*

part: a version: 2.2.22 update: *

VendorCmsmadesimple (8ed73986-e506-5acb-a027-f2d81aed9376)
ProductFile Manager (f3244ca1-aad0-5e7a-b75e-85412cf96eb4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-63678 vulnerable 2026-06-08 07:39:17.734858 Details available
An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.
Published: 2025-11-10T00:00:00.000Z
Updated: 2025-11-12T20:25:12.631Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.