VULNERABILITY INTELLIGENCE

CVE-2024-27623

CVSS score5.9 MEDIUM

EPSS probability0.43%

CISA KEVNot currently listed

Published2024-03-05

Last modified2026-06-17

Description

CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particularly when editing the Breadcrumbs.