VULNERABILITY INTELLIGENCE

CVE-2019-9061

CVSS score8.8 HIGH
EPSS probability1.57%
CISA KEVNot currently listed
Published2019-03-26
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.

Weakness classification

  • nvd@nist.gov: CWE-502

Primary references