Vendors / SimplePHPscripts Records 14 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now SimplePHPscripts records in CISA KEV No SimplePHPscripts vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module.
CVSS 4.0 HIGH 8.6· Network · Low privileges · No interaction · EPSS 0.00567 · Published 2026-02-01 · No fix listed CWE-89
Priority MEDIUM 56
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00328 · Published 2026-02-01 · No fix listed CWE-79
Priority MEDIUM 56
Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code.
CVSS 4.0 MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00329 · Published 2026-02-01 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium13 Low0 No CVSS0