CVE-2024-1527 — Unrestricted Upload of File with Dangerous Type in CMS Made Simple

CVE-2024-1527

Unrestricted Upload of File with Dangerous Type in CMS Made Simple PUBLISHED

Description (CNA)

Unrestricted file upload vulnerability in CMS Made Simple, affecting version 2.2.14. This vulnerability allows an authenticated user to bypass the security measures of the upload functionality and potentially create a remote execution of commands via webshell.

Affected (CNA)

Vendor / product	Versions
CMS Made Simple / CMS Made Simple	affected 2.2.14

CWE

CWE-434

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple

ADP enrichment

CVE

No English description supplied.

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-cms-made-simple

CISA-ADP

No English description supplied.

No references supplied.