CVE-2014-2219: Cmsimple Classic

Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter.

Affected products

• Cmsimple Cmsimple Classic: up to and including 3.5.4

Published 2014-03-20. Last modified 2026-06-17.