Simple-cms Project - vulnerabilities (CVEs)

7 CVEs in 1 products, 0 in the last 30 days, newest from 2026-02-01.

Products

CVE-2021-47919 - CVSS 6.4 (medium), 2026-02-01: Simple CMS 2.1 contains a non-persistent cross-site scripting vulnerability in the preview.php file's id parameter. Attackers can inject malicious script code…
CVE-2021-47918 - CVSS 8.8 (high), 2026-02-01: Simple CMS 2.1 contains a remote SQL injection vulnerability that allows privileged attackers to inject unfiltered SQL commands in the users module. Attackers…
CVE-2021-47917 - CVSS 6.4 (medium), 2026-02-01: Simple CMS 2.1 contains a persistent cross-site scripting vulnerability in user input parameters that allows remote attackers to inject malicious script code.…
CVE-2023-53927 - CVSS 5.4 (medium), 2025-12-17: PHPJabbers Simple CMS 5.0 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through section…
CVE-2023-53926 - CVSS 9.8 (critical), 2025-12-17: PHPJabbers Simple CMS 5.0 contains a SQL injection vulnerability in the 'column' parameter that allows remote attackers to manipulate database queries.…
CVE-2018-15565 - CVSS 8.8 (high), 2018-08-20: An issue was discovered in daveismyname simple-cms through 2014-03-11. admin/addpage.php does not require authentication for adding a page. This can also be…
CVE-2018-15564 - CVSS 8.8 (high), 2018-08-20: An issue was discovered in daveismyname simple-cms through 2014-03-11. There is a CSRF vulnerability that can delete any page via admin/?delpage=8.