CVE Catalog
CVE-2023-36969
HighCVSS 8.8Exploitation Probability (EPSS)
Very high risk44.81%
99th percentile - higher than 99% of all known CVEs
Summary
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.
Risk Assessment
Exploitation of this vulnerability could lead to an attacker gaining control over the system, posing a serious security threat to the organization.
Recommendation
It is recommended to update CMS Made Simple to the latest version to mitigate this vulnerability and restrict access to the file upload function.
Original NVD description (English source)
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.