Vulnerabilities > Cmsmadesimple > CMS Made Simple > 2.2.17
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-06 | CVE-2023-36969 | Unrestricted Upload of File with Dangerous Type vulnerability in Cmsmadesimple CMS Made Simple 2.2.17 CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function. | 8.8 |
| 2023-07-06 | CVE-2023-36970 | Cross-site Scripting vulnerability in Cmsmadesimple CMS Made Simple 2.2.17 A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function. | 5.4 |