PT-2023-25757 · Unknown · Cms Made Simple

CVE-2023-36969

Published

2023-07-06

Updated

2023-07-12

CVSS v3.1

8.8

High

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.17

Description The issue allows for Remote Command Execution via the File Upload Function.

Recommendations For CMS Made Simple version 2.2.17, update to a version that fixes this issue.

Exploit

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2023-36969

Cms Made Simple