Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: SimplePHPscripts Component: Simple Cms Php Clear all filters
TI-2021-22531 CVE-2021-47918 · GHSA-h64m-fxq4-m43w

Simple CMS 2.1 SQL Injection Vulnerability via Users Module

Priority HIGH 72

Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00567 Published 2026-02-01 No fix listed CWE-89
TI-2021-22530 CVE-2021-47917 · GHSA-pgc8-g7q5-fq5m

Simple CMS 2.1 Persistent Cross-Site Scripting via User Input Parameters

Priority MEDIUM 56

Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code.

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00329 Published 2026-02-01 No fix listed CWE-79