Cms Made Simple

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 4
    Known Exploited: 0
    0
    Critical Level Threats
    1
    High Level Threats
    1
    Medium Level Threats
    2
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-5203

    CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal

    Last Modified: Apr 24, 2026
    Published: Mar 31, 2026

    CVE-2026-4225

    CMS Made Simple User Management listusers.php cross site scripting

    Last Modified: Apr 22, 2026
    Published: Mar 16, 2026

    CVE-2025-63678

    An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

    Last Modified: Dec 31, 2025
    Published: Nov 10, 2025

    CVE-2008-2267

    Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in (1) .jsp, (2) .php3, (3) .cgi, (4) .dhtml, (5) .phtml, (6) .php5, or (7) .jar, then accessing it via a direct request to the file in modules/FileManager/postlet/.

    Last Modified: Apr 23, 2026
    Published: May 16, 2008
    Items Per Page
    Cms_Made_Simple Vulnerabilities & Security CVEs | CVE-DB