Priority MEDIUM 56
Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00328 · Published 2026-02-01 · No fix listed CWE-79
Priority HIGH 72
Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module.
CVSS 4.0HIGH 8.6· Network · Low privileges · No interaction · EPSS 0.00567 · Published 2026-02-01 · No fix listed CWE-89
Priority MEDIUM 56
Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code.
CVSS 4.0MEDIUM 5.1· Network · Low privileges · User interaction · EPSS 0.00329 · Published 2026-02-01 · No fix listed CWE-79
Priority LOW 27
A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 27
A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 24
A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00356 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 27
A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 27
A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 27
A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00357 · Published 2023-07-07 · No fix listed CWE-79
Priority LOW 27
A vulnerability was found in SimplePHPscripts GuestBook Script 2.2.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00394 · Published 2023-06-30 · No fix listed CWE-79
Priority LOW 27
A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00388 · Published 2023-06-30 · No fix listed CWE-79
Priority LOW 27
A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00394 · Published 2023-06-30 · No fix listed CWE-79
Priority LOW 28
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00502 · Published 2023-06-29 · No fix listed CWE-79
Priority LOW 28
A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00502 · Published 2023-06-29 · No fix listed CWE-79
THREATIST.IORead the docs