CVE-2020-17462: Cmsmadesimple CMS Made Simple

High severity, CVSS 7.8. EPSS: 1% chance of exploitation in the next 30 days.

CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798.

Affected products

• Cmsmadesimple CMS Made Simple: version 2.2.14 only

Published 2020-08-14. Last modified 2026-06-17.