Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fg3w-vv3r-vrgh

Опубликовано: 05 мар. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.

EPSS

Процентиль: 86%
0.03072
Низкий

7.2 High

CVSS3

Дефекты

CWE-75

Связанные уязвимости

CVSS3: 7.2
nvd
почти 2 года назад

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.

EPSS

Процентиль: 86%
0.03072
Низкий

7.2 High

CVSS3

Дефекты

CWE-75