c
cmsimple
Security Risk Profile
60
/100
highSecurity Risk Score
Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 10, 2008 to present
23
Total CVEs
11
Critical+High
0
Exploited
11
Unpatched
Threat Assessment
Avg CVSS
6.8
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
11
Critical/High
Risk Level
60/100
high
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
2High
9Medium
11Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
XSS
13
2
Path Traversal
3
3
Code Injection
1
4
CSRF
1
Most Affected Products
1. CmSimple CMSimple29
2. CmSimple CMSimple_XH2
3. Cmsimple-xh Cmsimple Xh1
4. CmSimple CMSimple Classic1
Recent Vulnerabilities
See more →CVE-2026-78834
unknown
Sep 8, 2026🔧 No Patch
CVE-2021-47733
CVSS 5.1medium
CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding
Dec 23, 2025🔧 No Patch
CVE-2021-47735
CVSS 8.8high
CMSimple 5.4 Authenticated Remote Code Execution via Template Editing
Dec 23, 2025🔧 No Patch
CVE-2021-47734
CVSS 8.6high
CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
Dec 23, 2025🔧 No Patch
CVE-2021-47732
CVSS 5.1medium
CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
Dec 23, 2025🔧 No Patch
CVE-2024-58280
CVSS 8.8high
CMSimple 5.15 Remote Command Execution via Extensions Configuration
Dec 10, 2025🔧 No Patch
CVE-2025-63589
CVSS 7.1high
Nov 6, 2025🔧 No Patch
CVE-2024-57546
CVSS 7.5high
Jan 27, 2025🔧 No Patch
CVE-2024-57548
CVSS 9.1critical
Jan 27, 2025🔧 No Patch
CVE-2024-57549
CVSS 7.5high
Jan 27, 2025🔧 No Patch
Monitor cmsimple in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.