CVE-2024-27625: Cmsmadesimple CMS Made Simple

Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days.

CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.

Affected products

Published 2024-03-05. Last modified 2026-06-17.