PT-2024-21945

CVE-2024-27559

Published

2024-03-01

Updated

2025-03-28

CVSS 3.1

6.3

Medium

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Stupid Simple CMS version 1.2.4

Description A Cross-Site Request Forgery (CSRF) issue was found in the component /save settings.php.

Recommendations For Stupid Simple CMS version 1.2.4, consider restricting access to the /save settings.php component until a patch is available.

Exploitability

Exploit

Fix

Impacts

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾