CoreCVE
Back

CRITICAL

CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution

Published Jan 2, 2018

Description

CMS Made Simple version 2.1.6 and 2.2 are vulnerable to Smarty templating injection in some core modules, resulting in unauthenticated PHP code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-74

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jan 2, 2018
Updated Sep 16, 2024
Reserved Jan 2, 2018
Link CVE-2017-1000453
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-1000453
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-1000453
ENISA EUVD
Assigner n/a
Published n/a
Updated n/a
Exploited since n/a
Link n/a