Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
codelyfe records in CISA KEVNo codelyfe vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 73
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00316 · Published 2024-03-01 · No fix listed CWE-352
Priority HIGH 71
Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00303 · Published 2024-01-17 · No fix listed CWE-352
Priority MEDIUM 61
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php
CVSS 3.1MEDIUM 6.3· Network · Low privileges · No interaction · EPSS 0.00225 · Published 2024-03-01 · No fix listed CWE-352
Priority MEDIUM 60
Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00427 · Published 2024-03-01 · No fix listed CWE-79
Priority MEDIUM 60
A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01201 · Published 2024-04-02 · No fix listed CWE-307
Priority MEDIUM 47
A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02864 · Published 2023-12-17 · No fix listed CWE-78
Priority MEDIUM 44
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00972 · Published 2023-12-17 · No fix listed CWE-434
Priority MEDIUM 42
A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01201 · Published 2023-12-18 · No fix listed CWE-287
Priority LOW 30
A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00764 · Published 2023-12-21 · No fix listed CWE-24
Priority LOW 27
Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00376 · Published 2024-01-17 · No fix listed CWE-79
Priority LOW 26
A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00906 · Published 2023-12-21 · No fix listed CWE-24
THREATIST.IORead the docs