CVE-2021-28998

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions through 2.2.15

Description The issue allows remote authenticated attackers to gain a webshell via a crafted phar file. This is achieved through a file upload vulnerability.

Recommendations For versions through 2.2.15, update to a version later than 2.2.15 to resolve the issue. As a temporary workaround, consider restricting file uploads to minimize the risk of exploitation.