PT-2026-25635 · Undefined · Undefined

Feioklucy · Publicado 2026-03-16 · Atualizado 2026-03-16 · CVE-2026-4225

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions up to 2.2.21

Description A security issue exists in CMS Made Simple that allows for cross site scripting. The issue is located in the User Management Module, specifically within the admin/listusers.php file. Manipulation of the Message argument can trigger the flaw, and the attack can be carried out remotely. The exploit for this issue has been publicly released.

Recommendations Versions prior to 2.2.21 should be updated.

Exploit

Correção

XSS

Code Injection

Enumeração de Fraquezas

CWE-79

CWE-94

Identificadores relacionados

CVE-2026-4225

Produtos afetados

Undefined

Referências · 8

• 🔥 https://github.com/feixuezhi/cms/wiki · Exploit
• https://t.me/CVEtracker/47521 · Publicação no Telegram
• https://vuldb.com/?ctiid.351148 · Nota
• https://vuldb.com/?submit.770530 · Nota
• https://twitter.com/cyberbivash/status/2033467890125398159 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033583689482047921 · Publicação no Twitter
• https://vuldb.com/?id.351148 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-4225 · Nota de Segurança