PatchTheCVEsimplece vulnerabilities and fixes
Recent CVEs affecting simplece, with upgrade or downgrade steps. 2 tracked.
simplece has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2017-06-15. Highest priority: CVE-2017-9673 (score 50/100).
- CVE-2017-9674 MEDIUM 5.4 UPGRADE In SimpleCE 2.3.0, an authenticated XSS vulnerability was found on index.php/content/text/1?return_url=[XSS] e
- CVE-2017-9673 HIGH 8.8 UPGRADE In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/us
FAQ
How do I fix simplece vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is simplece being exploited right now?
None of the tracked simplece CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which simplece CVE should I patch first?
CVE-2017-9673 currently ranks highest (50/100): In SimpleCE 2.3.0, a CSRF vulnerability can be exploited to add an administrator account (via the index.php/us.