CVE-2024-27625

MEDIUM

CMS Made Simple <2.2.19 - XSS

Title source: llm

Description

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

References (1)

Scores

CVSS v3 4.8
EPSS 0.0008
EPSS Percentile 23.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Classification

CWE
CWE-79
Status published

Affected Products (1)

cmsmadesimple/cms_made_simple

Timeline

Published Mar 05, 2024
Tracked Since Feb 18, 2026