VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 23, 2025· Updated Jun 17, 2026

CVE-2021-47734

CVE-2021-47734

Description

CMSimple 5.4 contains an authenticated local file inclusion vulnerability that allows remote attackers to manipulate PHP session files and execute arbitrary code. Attackers can leverage the vulnerability by changing the functions file path and uploading malicious PHP code through session file upload mechanisms.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Cmsimple/Cmsimplev53 versions
    CMSimple 5.4+ 2 more
    • (no CPE)range: CMSimple 5.4
    • (no CPE)range: =5.4
    • cpe:2.3:a:cmsimple:cmsimple:5.4:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.