Threats affecting pkg:github/capture0x/CMSMadeSimple

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 2.0%	CVE-2024-27622CMSMadeSimple · Special Element Injection High7.2EPSS 2.0%2024-03-05CVE Database V5CVE-2024-27622 A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code. EPSS 2.0%Vulnerability CWE-75	CVE Database V5	2024-03-05

Page 1 of 1