CVE-2024-27625: XSS
Published Mar 5, 2024
·Updated
CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.
Affected Software
2 affected components
CMS Made Simple CMS Made Simple
CMSmadesimple CMS Made Simple=2.2.19
Event History
Mar 5, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-27625?
CVE-2024-27625 has been classified as a medium severity Cross Site Scripting (XSS) vulnerability.
2
How do I fix CVE-2024-27625?
To fix CVE-2024-27625, you should update CMS Made Simple to the latest version where the vulnerability is patched.
3
Which version of CMS Made Simple is affected by CVE-2024-27625?
CVE-2024-27625 affects CMS Made Simple version 2.2.19.
4
What module in CMS Made Simple is vulnerable in CVE-2024-27625?
The File Manager module in the admin panel of CMS Made Simple is vulnerable in CVE-2024-27625.
5
What type of vulnerability is CVE-2024-27625 classified as?
CVE-2024-27625 is classified as a Cross Site Scripting (XSS) vulnerability.