← All advisories

High severity7.2NVD Advisory· Published May 8, 2023· Updated Jun 17, 2026

CVE-2021-28998

CVE-2021-28998

Description

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*:*
Range: <=2.2.15
CMS Made Simple/CMS Made Simpledescription
Simple CMS/Simple CMSllm-fuzzy
Range: <=2.2.15

Patches

Vulnerability mechanics

References

2

github.com/beerpwn/CVE/blob/master/cms_made_simple_2021/file_upload_RCE/File_upload_to_RCE.mdnvdExploit
seclists.org/fulldisclosure/2021/Mar/50nvdMailing ListThird Party Advisory

News mentions

0

No linked articles in our index yet.