Vendors / Cmsmadesimple Records 158 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 9
CVSS high 42
Exploited now Cmsmadesimple records in CISA KEV No Cmsmadesimple vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02262 · Published 2017-02-21 · No fix listed CWE-200
Priority LOW 27
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via defaultadmin.
CVSS 3.0 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0159 · Published 2017-02-21 · No fix listed CWE-200
Priority LOW 27
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01595 · Published 2017-02-21 · No fix listed CWE-200
Open these records in search → All records by CVSS severity
9 42 102 5 0
