← All advisories

Medium severity4.8NVD Advisory· Published Oct 16, 2019· Updated Jun 17, 2026

CVE-2019-17629

CVE-2019-17629

Description

CMS Made Simple (CMSMS) 2.2.11 allows stored XSS by an admin via a crafted image filename on the "file manager > upload images" screen.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.11:*:*:*:*:*:*:*
CMS Made Simple/CMS Made Simpledescription
Cmsmadesimple/Cmsmsllm-create
Range: =2.2.11
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.11

Patches

Vulnerability mechanics

References

2

dev.cmsmadesimple.org/bug/view/12146nvdExploitVendor Advisory
forum.cmsmadesimple.org/viewforum.phpnvdVendor Advisory

News mentions

0

No linked articles in our index yet.