Codelyfe

Stupid Simple Cms

11 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.7

CVE-2024-3202

  • EPSS 0.34%
  • Veröffentlicht 02.04.2024 22:15:09
  • Zuletzt bearbeitet 21.11.2024 09:29:08

A vulnerability, which was classified as problematic, has been found in codelyfe Stupid Simple CMS 1.2.4. This issue affects some unknown processing of the component Login Page. The manipulation leads to improper restriction of excessive authenticati...

6.1

CVE-2024-27558

Exploit
  • EPSS 0.12%
  • Veröffentlicht 01.03.2024 17:15:07
  • Zuletzt bearbeitet 28.03.2025 14:09:20

Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.

6.3

CVE-2024-27559

Exploit
  • EPSS 0.07%
  • Veröffentlicht 01.03.2024 17:15:07
  • Zuletzt bearbeitet 28.03.2025 14:26:01

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.php

8.8

CVE-2024-27689

Exploit
  • EPSS 0.16%
  • Veröffentlicht 01.03.2024 17:15:07
  • Zuletzt bearbeitet 28.03.2025 14:25:42

Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.

6.1

CVE-2024-22714

Exploit
  • EPSS 0.09%
  • Veröffentlicht 17.01.2024 18:15:45
  • Zuletzt bearbeitet 20.06.2025 18:15:27

Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.

8.8

CVE-2024-22715

Exploit
  • EPSS 0.19%
  • Veröffentlicht 17.01.2024 18:15:45
  • Zuletzt bearbeitet 21.11.2024 08:56:34

Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.

6.5

CVE-2023-7040

Exploit
  • EPSS 0.28%
  • Veröffentlicht 21.12.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:45:06

A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown functionality of the file /file-manager/rename.php. The manipulation of the argument oldName leads to path tra...

5.4

CVE-2023-7041

Exploit
  • EPSS 0.14%
  • Veröffentlicht 21.12.2023 20:15:08
  • Zuletzt bearbeitet 21.11.2024 08:45:06

A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this issue is some unknown functionality of the file /file-manager/rename.php. The manipulation of the argument newName leads to ...

9.1

CVE-2023-6907

Exploit
  • EPSS 0.05%
  • Veröffentlicht 18.12.2023 04:15:51
  • Zuletzt bearbeitet 21.11.2024 08:44:48

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation...

9.8

CVE-2023-6902

Exploit
  • EPSS 0.08%
  • Veröffentlicht 17.12.2023 16:15:13
  • Zuletzt bearbeitet 21.11.2024 08:44:47

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. This vulnerability affects unknown code of the file /file-manager/upload.php. The manipulation of the argument file leads to unrestricted upload. The...