PT-2026-29288 · Undefined · Undefined

Caginkyr · Published 2026-03-31 · Updated 2026-03-31 · CVE-2026-5203

NVD

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:L/Au:M/C:P/I:P/A:P

A vulnerability was found in CMS Made Simple up to 2.2.22. This impacts the function copyFilesToFolder in the library modules/UserGuide/lib/class.UserGuideImporterExporter.php of the component UserGuide Module XML Import. The manipulation results in path traversal. It is possible to launch the attack remotely. The exploit has been made public and could be used. This issue has been reported early to the project. They confirmed, that "this has already been discovered and fixed for the next release."

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-5203

Affected Products

Undefined

References · 5

• 🔥 https://drive.proton.me/urls/Q0JHZ339BW#X9P2G3Guwvwa · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-5203 · Security Note
• https://vuldb.com/vuln/354331 · Note
• https://vuldb.com/vuln/354331/cti · Note
• https://vuldb.com/submit/772855 · Note