CVE-2017-1000453: Cmsmadesimple CMS Made Simple

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution.

Affected products

• Cmsmadesimple CMS Made Simple: before 2.2 (fixed in 2.2); from 2.2.1

Published 2018-01-02. Last modified 2026-06-17.