CVE-2024-32236: Cmseasy

Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue in CmsEasy v.7.7 and before allows a remote attacker to obtain sensitive information via the update function in the index.php component.

Affected products

• Cmseasy Cmseasy: up to and including 7.7.0

Published 2024-04-25. Last modified 2026-06-17.