CVE-2021-43741: Cmsimple

Critical severity, CVSS 9.8. EPSS: 4.7% chance of exploitation in the next 30 days.

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.

Affected products

• Cmsimple Cmsimple: version 5.4 only

Published 2022-04-13. Last modified 2026-06-17.