VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 23, 2025· Updated Mar 17, 2026

CMSimple 5.4 Authenticated Local File Inclusion Remote Code Execution

CVE-2021-47734

Description

CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code. Attackers can leverage the vulnerability by changing the functions file path and uploading malicious PHP code through session file upload mechanisms.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Cmsimple/Cmsimplellm-fuzzy2 versions
    =5.4+ 1 more
    • (no CPE)range: =5.4
    • (no CPE)range: CMSimple 5.4

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.