VULNERABILITY INTELLIGENCE

CVE-2024-27625

CVSS score4.8 MEDIUM
EPSS probability0.41%
CISA KEVNot currently listed
Published2024-03-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-79

Primary references