| |
Vulnerability CVE-2024-27622
Published: 2024-03-05
| Description: |
A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19. This vulnerability arises from inadequate sanitization of user-supplied input in the 'Code' section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code. |
References: |
https://github.com/capture0x/CMSMadeSimple/
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
