CVE-2024-32392: Cmsimple

Medium severity, CVSS 4.5. EPSS: 0.8% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component.

Affected products

• Cmsimple Cmsimple: version 5.15 only

Published 2024-04-19. Last modified 2026-06-17.