CVE-2017-16783

Critical

Published: 10/11/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In CMS Made Simple version 2.1.6, there is a Server-Side Template Injection vulnerability via the cntnt01detailtemplate parameter.

An attacker could exploit this vulnerability to execute malicious code on the server, potentially leading to system compromise.

It is recommended to update CMS Made Simple to the latest version to mitigate this vulnerability.

Original NVD description (English source)

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.