Read the docs

Cmsmadesimple

Records158All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high42CVSS 7.0–8.9

Exploited now

Cmsmadesimple records in CISA KEV

No Cmsmadesimple vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Cms Made Simple 154 records HIGH Form Builder 3 records MEDIUM Bable 1 record LOW Cmsmadesimple 1 record LOW File Manager 1 record HIGH

Records

1 record in File Manager · all components

TI-2025-39411 CVE-2025-63678 · GHSA-33vr-hv7f-mv36

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS…

Priority HIGH 67

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a c…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00477 Published 2025-11-10 No fix listed CWE-434
Open these records in search →