CVE-2018-1000092: Cmsmadesimple CMS Made Simple

High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days.

CMS Made Simple version versions 2.2.5 contains a Cross ite Request Forgery (CSRF) vulnerability in Admin profile page that can result in Details can be found here http://dev.cmsmadesimple.org/bug/view/11715. This attack appear to be exploitable via A specially crafted web page. This vulnerability appears to have been fixed in 2.2.6.

Affected products

Published 2018-03-13. Last modified 2026-06-17.