CVE-2024-27623: Cmsmadesimple CMS Made Simple

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

CMS Made Simple version 2.2.19 is vulnerable to Server-Side Template Injection (SSTI). The vulnerability exists within the Design Manager, particularly when editing the Breadcrumbs.

Affected products

• Cmsmadesimple CMS Made Simple: version 2.2.19 only

Published 2024-03-05. Last modified 2026-06-17.