Medium severity6.5NVD Advisory· Published Apr 27, 2018· Updated Jun 17, 2026
CVE-2018-10520
CVE-2018-10520
Description
In CMS Made Simple (CMSMS) through 2.2.7, the "module remove" operation in the admin dashboard contains an arbitrary file deletion vulnerability that can cause DoS, exploitable by an admin user, because the attacker can remove all lib/ files in all directories.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <=2.2.7
Patches
Vulnerability mechanics
References
1- github.com/itodaro/cmsms_cve/blob/master/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.