What’s Vulnerable › Products

CMS Made Simple vulnerabilities

157 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your CMS Made Simple version is affected

Latest CMS Made Simple vulnerabilities

• CVE-2020-37238 — CMS Made Simple 2.2.15 Stored XSS via SVG File Upload (CVSS 6.4)
• CVE-2026-5203 — CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal (CVSS 4.7)
• CVE-2026-4225 — CMS Made Simple User Management listusers.php cross site scripting (CVSS 2.4)
• CVE-2025-5153 — CMS Made Simple Design Manager Module cross site scripting (CVSS 4.8)
• CVE-2024-1529 — Cross-site Scripting in CMS Made Simple (CVSS 6.1)
• CVE-2024-1528 — Cross-site Scripting in CMS Made Simple (CVSS 6.1)
• CVE-2024-1527 — Unrestricted Upload of File with Dangerous Type in CMS Made Simple (CVSS 8.8)
• CVE-2024-27625 — (CVSS 4.8)
• CVE-2024-27623 — (CVSS 5.9)
• CVE-2024-27622 — (CVSS 7.2)
• CVE-2023-43352 — (CVSS 7.8)
• CVE-2023-43360 — (CVSS 5.4)
• CVE-2023-43358 — (CVSS 5.4)
• CVE-2023-43357 — (CVSS 5.4)
• CVE-2023-43356 — (CVSS 5.4)
• CVE-2023-43355 — (CVSS 5.4)
• CVE-2023-43354 — (CVSS 5.4)
• CVE-2023-43353 — (CVSS 5.4)
• CVE-2023-43359 — (CVSS 5.4)
• CVE-2023-43872 — (CVSS 5.4)
• CVE-2023-43339 — (CVSS 6.1)
• CVE-2023-36970 — (CVSS 5.4)
• CVE-2023-36969 — (CVSS 8.8)
• CVE-2021-28999 — (CVSS 8.8)
• CVE-2021-28998 — (CVSS 7.2)