cms made simple
Security Risk Profile
33
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 12 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from May 16, 2008 to present
12
Total CVEs
6
Critical+High
0
Exploited
3
Unpatched
Threat Assessment
Avg CVSS
6.2
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
3
Critical/High
Risk Level
33/100
low
Severity Distribution
Critical
1High
5Medium
5Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
6Age Distribution
Common Weaknesses (CWE)
1
XSS
6
2
Code Injection
3
3
Malicious File Upload
2
4
Path Traversal
1
5
Input Validation
1
Most Affected Products
1. CMS Made Simple CMS Made Simple11
2. CMSmadesimple CMS Made Simple8
3. CMS Made Simple Foundation File Manager1
4. CMSmadesimple File Manager1
Recent Vulnerabilities
See more →CVE-2020-37238
CVSS 5.1medium
CMS Made Simple 2.2.15 Stored XSS via SVG File Upload
5/16/2026🔧 No Patch
CVE-2026-5203
CVSS 2.0EPSS 0%low
CMS Made Simple UserGuide Module XML Import class.UserGuideImporterExporter.php _copyFilesToFolder path traversal
3/31/2026🔧 No Patch
CVE-2026-4225
CVSS 4.8EPSS 0%medium
CMS Made Simple User Management listusers.php cross site scripting
3/16/2026🔧 No Patch
CVE-2025-63678
CVSS 7.2high
11/10/2025🔧 No Patch
CVE-2025-5153
CVSS 5.1EPSS 0%medium
CMS Made Simple Design Manager Module cross site scripting
5/25/2025🔧 No Patch
CVE-2024-1529
CVSS 7.4high
Cross-site Scripting in CMS Made Simple
3/12/2024
CVE-2024-1528
CVSS 7.4high
Cross-site Scripting in CMS Made Simple
3/12/2024
CVE-2024-1527
CVSS 9.8critical
Unrestricted Upload of File with Dangerous Type in CMS Made Simple
3/12/2024
CVE-2024-27623
CVSS 5.9EPSS 0%medium
3/5/2024🔧 No Patch
CVE-2024-27622
CVSS 7.2EPSS 0%high
3/5/2024🔧 No Patch
Monitor cms made simple in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.