CVE-2026-116623

33th percentile - higher than 33% of all known CVEs

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.

Missing authorization in the admin interface may allow a remote attacker to perform unauthorized operations, and the public exploit increases the risk of rapid exploitation.

Restrict access to the admin interface and apply a fix or mitigation, as the exploit is publicly available.