PatchTheCVEcmsimple vulnerabilities
Recent CVEs affecting cmsimple products. 14 tracked.
cmsimple has 14 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-12-23. Highest priority: CVE-2024-57548 (score 52/100).
- CVE-2024-58280 HIGH 8.8 DOWNGRADE CMSimple 5.15 contains a remote command execution vulnerability that allows authenticated attackers to modify
- CVE-2024-57549 HIGH 7.5 DOWNGRADE CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parame
- CVE-2024-57548 CRITICAL 9.1 DOWNGRADE CMSimple 5.16 allows the user to edit log.php file via print page.
- CVE-2024-57547 HIGH 7.5 DOWNGRADE Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information
- CVE-2024-57546 HIGH 7.5 DOWNGRADE An issue in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to t
- CVE-2024-33424 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute
- CVE-2024-33423 HIGH 7.4 DOWNGRADE Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute ar
- CVE-2024-32392 MEDIUM 4.5 DOWNGRADE Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via t
- CVE-2024-32345 HIGH 7.2 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute
- CVE-2024-32344 MEDIUM 6.8 DOWNGRADE A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute
- CVE-2021-47735 HIGH 8.8 DOWNGRADE CMSimple 5.4 contains an authenticated remote code execution vulnerability that allows logged-in attackers to
- CVE-2021-47734 HIGH 7.8 DOWNGRADE CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to mani
- CVE-2021-47733 MEDIUM 6.1 DOWNGRADE CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by
- CVE-2021-47732 MEDIUM 6.1 DOWNGRADE CMSimple 5.2 contains a stored cross-site scripting vulnerability in the Filebrowser External input field that
FAQ
How do I fix cmsimple vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cmsimple being exploited right now?
None of the tracked cmsimple CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cmsimple CVE should I patch first?
CVE-2024-57548 currently ranks highest (52/100): CMSimple 5.16 allows the user to edit log.php file via print page..