Peter Arts

**Name of the Vulnerable Software and Affected Versions** CMS Made Simple version 1.x Form Builder before version 0.8.1.6 **Description** The issue allows remote attackers to execute PHP code. This is achieved via the `cntnt01fbrp forma form template` parameter in the admin store form endpoint. **Recommendations** For CMS Made Simple version 1.x Form Builder before version 0.8.1.6, update to version 0.8.1.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** CMS Made Simple version 1.x Form Builder before version 0.8.1.6 **Description** The issue allows remote attackers to conduct information-disclosure attacks via exportxml. **Recommendations** For CMS Made Simple version 1.x Form Builder before version 0.8.1.6, update to version 0.8.1.6 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** CMS Made Simple version 1.x Form Builder before version 0.8.1.6 **Description** The issue allows remote attackers to conduct information-disclosure attacks. This is possible via the default admin interface. **Recommendations** For CMS Made Simple version 1.x Form Builder before version 0.8.1.6, update to version 0.8.1.6 or later to resolve the issue.