CVE-2026-116623: code-projects Simple Content Management System Admin welcome.php authorization

Published Oct 27, 2026

Updated

A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.

Affected Software

1 affected component

Code-projects Simple Content Management System=1.0

Event History

Oct 27, 2026

CVE Published

via MITRE·12:45 AM

Data Sourced

via MITRE·12:45 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

The issue is remotely exploitable and requires no privileges or user interaction according to the supplied vector. It affects the Admin Interface through the addnews argument handled by /web/admin/welcome.php.

Is public exploit code available?

Yes. The available data states that an exploit is public and may be used.

What security impact could successful exploitation have?

The supplied severity vector indicates low impacts to confidentiality, integrity, and availability. The issue is classified as high severity with a 7.3 score.