CMS Made Simple vulnerabilities

CMS Made Simple (CMSMS) version 2.1.6 allows remote authenticated administrators to execute arbitrary PHP code via the code parameter to admin/editusertag.php, related to the CreateTagFunction and CallUserTag functions.

CVE-2016-7904 in CMS Made Simple before version 2.1.6 has a cross-site request forgery (CSRF) vulnerability that allows remote attackers to hijack the authentication of administrators for requests that create accounts via an admin/adduser.php request.

CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.

CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.

CMS Made Simple (CMSMS) before version 2.2.5 does not properly cache login information in sessions.

In CMS Made Simple version 2.1.6, there is a Server-Side Template Injection vulnerability via the cntnt01detailtemplate parameter.

CMS Made Simple version 1.x before 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.

CMS Made Simple 2.2.15 contains a stored cross-site scripting vulnerability allowing authenticated users with Content Manager access to inject malicious scripts through SVG file uploads. Attackers can upload SVG files with embedded JavaScript, which execute when other authenticated users access the file.

A vulnerability was found in CMS Made Simple up to version 2.2.22 in the _copyFilesToFolder function of the UserGuide Module XML Import component. Manipulation leads to path traversal, enabling remote attack. The exploit is publicly available, and the project confirmed it has been fixed in the next release.

A XSS vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web scripts or HTML via the File Upload function.