CVE-2017-6071: Cmsmadesimple CMS Made Simple

Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days.

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.

Affected products

• Cmsmadesimple CMS Made Simple: up to and including 1.12.2
• Cmsmadesimple Form Builder: up to and including 0.8.1.5

Published 2017-02-21. Last modified 2026-06-17.