PatchTheCVEcmsmadesimple vulnerabilities
Recent CVEs affecting cmsmadesimple products. 2 tracked.
cmsmadesimple has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-10. Highest priority: CVE-2025-63678 (score 40/100).
- CVE-2025-63678 HIGH 7.2 DOWNGRADE An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation F
- CVE-2025-5153 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, has been found in CMS Made Simple 2.2.21
FAQ
How do I fix cmsmadesimple vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cmsmadesimple being exploited right now?
None of the tracked cmsmadesimple CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cmsmadesimple CVE should I patch first?
CVE-2025-63678 currently ranks highest (40/100): An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation F.