CVE-2024-27622: Code Injection
A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19 / 2.2.21. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-27622?
CVE-2024-27622 is considered a high severity vulnerability due to its remote code execution capability.
How do I fix CVE-2024-27622?
To fix CVE-2024-27622, it is recommended to upgrade CMS Made Simple to the latest version that addresses this vulnerability.
Who is affected by CVE-2024-27622?
CVE-2024-27622 affects users of CMS Made Simple versions 2.2.19 and 2.2.21.
What type of vulnerability is CVE-2024-27622?
CVE-2024-27622 is a remote code execution vulnerability resulting from inadequate input sanitization.
Can unauthenticated users exploit CVE-2024-27622?
No, CVE-2024-27622 can only be exploited by authenticated users with administrative privileges.