5.8
/ 10
MEDIUM
AV:N/AC:L/Au:M/C:P/I:P/A:P
Description
CVE-2026-5203 — CMS Made Simple ≤ 2.2.22 RCE Path Traversal + Arbitrary File Upload Summary The UserGuide module's XML import functionality in CMS Made Simple ≤ 2.2.22 fails to sanitize user-supplied filenames, allowing an authenticated administrator...
Basic Information
ID
8374CFD7-CB1D-5D01-A3A7-BCE355F92621
Published
May 18, 2026 at 22:47
Modified
May 18, 2026 at 22:55