CMS Made Simple 2.2.14
Approved changes feed: RSS · Atom
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.14:*:*:*:*:*:*:*
part: a version: 2.2.14 update: *
| Vendor | Cmsmadesimple (8ed73986-e506-5acb-a027-f2d81aed9376) |
|---|---|
| Product | Cms Made Simple (3c989cef-25f4-5ecb-b903-28c284166358) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:cmsmadesimple/cmsmadesimple |
purl2cpe | 2026-06-01 10:12:04.294417 |
pkg:github/cmsmadesimple/cmsmadesimple-2-0 |
purl2cpe | 2026-06-01 10:12:04.294418 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-1529 |
vulnerable | 2026-06-08 06:27:13.254782 |
Cross-site Scripting in CMS Made Simple
HIGH (7.4)
Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially take over their browser session.
Published: 2024-03-12T15:25:56.200Z
Updated: 2024-08-12T20:47:36.435Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1528 |
vulnerable | 2026-06-08 06:27:13.254234 |
Cross-site Scripting in CMS Made Simple
HIGH (7.4)
CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially hijack their browser session.
Published: 2024-03-12T15:22:10.988Z
Updated: 2024-08-01T18:40:21.390Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1527 |
vulnerable | 2026-06-08 06:27:13.253361 |
Unrestricted Upload of File with Dangerous Type in CMS Made Simple
CRITICAL (9.8)
Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the security measures of the upload functionality and potentially create a remote execution of commands via webshell.
Published: 2024-03-12T15:19:52.713Z
Updated: 2024-08-08T18:57:16.775Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36416 |
vulnerable | 2026-06-08 05:25:03.037685 |
Details available
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Design" parameter under the "Designs" module.
Published: 2021-07-02T17:52:00.000Z
Updated: 2024-08-04T17:30:06.890Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36415 |
vulnerable | 2026-06-08 05:25:03.037401 |
Details available
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module.
Published: 2021-07-02T17:51:58.000Z
Updated: 2024-08-04T17:30:06.836Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36414 |
vulnerable | 2026-06-08 05:25:03.037032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36413 |
vulnerable | 2026-06-08 05:25:03.036563 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36412 |
vulnerable | 2026-06-08 05:25:03.036174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36411 |
vulnerable | 2026-06-08 05:25:03.035893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36410 |
vulnerable | 2026-06-08 05:25:03.035611 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36409 |
vulnerable | 2026-06-08 05:25:03.035289 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36408 |
vulnerable | 2026-06-08 05:25:03.034781 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-27377 |
vulnerable | 2026-06-08 05:23:52.658303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-24860 |
vulnerable | 2026-06-08 05:22:35.676666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23481 |
vulnerable | 2026-06-08 05:22:31.930263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23241 |
vulnerable | 2026-06-08 05:22:31.827554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-23240 |
vulnerable | 2026-06-08 05:22:31.826985 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-22732 |
vulnerable | 2026-06-08 05:22:31.631673 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-17462 |
vulnerable | 2026-06-08 05:20:56.548275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-14926 |
vulnerable | 2026-06-08 05:19:24.990696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.