Vulnerabilities

TI-2024-03002 CVE-2024-3202 · GHSA-5jm7-9q58-m675

codelyfe Stupid Simple CMS Login Page excessive authentication

MEDIUM 60

A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01201 Published 2024-04-02 No fix listed CWE-307

TI-2024-18351 CVE-2024-27689 · GHSA-r3c9-9rr9-9xmc

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

HIGH 73

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00316 Published 2024-03-01 No fix listed CWE-352

TI-2024-18302 CVE-2024-27559 · GHSA-26m8-33mx-qgcj

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF)…

MEDIUM 61

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00225 Published 2024-03-01 No fix listed CWE-352

TI-2024-18301 CVE-2024-27558 · GHSA-c8xx-g3f8-jxf3

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.

MEDIUM 60

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00427 Published 2024-03-01 No fix listed CWE-79

TI-2024-15107 CVE-2024-22715 · GHSA-m88h-qmxh-92cm

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF)…

HIGH 71

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00303 Published 2024-01-17 No fix listed CWE-352

TI-2024-15106 CVE-2024-22714 · GHSA-m7rj-gf65-6q26

Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.

LOW 27

Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00376 Published 2024-01-17 No fix listed CWE-79

TI-2023-06437 CVE-2023-7041 · GHSA-84pc-mjpf-2cmc

codelyfe Stupid Simple CMS rename.php path traversal

LOW 26

A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00906 Published 2023-12-21 No fix listed CWE-24

TI-2023-06436 CVE-2023-7040 · GHSA-33gw-pvgj-248f

codelyfe Stupid Simple CMS rename.php path traversal

LOW 30

A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00764 Published 2023-12-21 No fix listed CWE-24

TI-2023-06312 CVE-2023-6907 · GHSA-qm83-jg9g-2862

codelyfe Stupid Simple CMS Deletion Interface delete.php improper authentication

MEDIUM 42

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01201 Published 2023-12-18 No fix listed CWE-287

TI-2023-06307 CVE-2023-6902 · GHSA-cj4r-q3q9-9m76

codelyfe Stupid Simple CMS upload.php unrestricted upload

MEDIUM 44

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00972 Published 2023-12-17 No fix listed CWE-434

TI-2023-06306 CVE-2023-6901 · GHSA-j74x-rpqw-7gjp

codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injection

MEDIUM 47

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02864 Published 2023-12-17 No fix listed CWE-78

Vulnerabilities

Filters