c
cmsimple
Security Risk Profile
72
/100
highSecurity Risk Score
Comprehensive risk assessment based on 24 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from June 10, 2008 to present
24
Total CVEs
13
Critical+High
0
Exploited
13
Unpatched
Threat Assessment
Avg CVSS
6.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
13
Critical/High
Risk Level
72/100
high
Severity Distribution
Critical
2High
11Medium
11Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
5Age Distribution
Common Weaknesses (CWE)
1
XSS
13
2
Path Traversal
3
3
CSRF
2
4
Code Injection
2
Most Affected Products
1. CmSimple CMSimple30
2. CmSimple CMSimple_XH2
3. Cmsimple-xh Cmsimple Xh1
4. CmSimple CMSimple Classic1
Recent Vulnerabilities
See more →CVE-2026-88418
CVSS 8.8high
Sep 22, 2026🔧 No Patch
CVE-2026-78834
CVSS 8.8high
Sep 8, 2026🔧 No Patch
CVE-2021-47733
CVSS 5.1medium
CMSimple 5.4 Cross-Site Scripting via HTML Unicode Encoding
Dec 23, 2025🔧 No Patch
CVE-2021-47735
CVSS 8.8high
CMSimple 5.4 Authenticated Remote Code Execution via Template Editing
Dec 23, 2025🔧 No Patch
CVE-2021-47734
CVSS 8.6high
CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution
Dec 23, 2025🔧 No Patch
CVE-2021-47732
CVSS 5.1medium
CMSimple 5.2 Stored Cross-Site Scripting via Filebrowser External Input
Dec 23, 2025🔧 No Patch
CVE-2024-58280
CVSS 8.6high
CMSimple 5.15 Remote Command Execution via Extensions Configuration
Dec 10, 2025🔧 No Patch
CVE-2025-63589
CVSS 7.1high
Nov 6, 2025🔧 No Patch
CVE-2024-57546
CVSS 7.5high
Jan 27, 2025🔧 No Patch
CVE-2024-57548
CVSS 9.1critical
Jan 27, 2025🔧 No Patch
Monitor cmsimple in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.