Lucene search
PRIOn knowledge basePRION:CVE-2024-27622HistoryMar 05, 2024 - 2:15 p.m.
Remote code execution
2024-03-0514:15:00
PRIOn knowledge base
www.prio-n.com
9
remote code execution
cms made simple
user defined tags
input sanitization
arbitrary php code
A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19. This vulnerability arises from inadequate sanitization of user-supplied input in the ‘Code’ section of the module. As a result, authenticated users with administrative privileges can inject and execute arbitrary PHP code.
References
Related
nvd
nvd
CVE-2024-27622
2024-03-05 14:15:49
cvelist
cvelist
CVE-2024-27622
2024-03-05 00:00:00
cve
cve
CVE-2024-27622
2024-03-05 14:15:49
openvas
openvas
CMS Made Simple <= 2.2.20 Multiple Vulnerabilities
2024-03-08 00:00:00