critical9.8
CVE-2021-43741
CMSimple 5.4 is vulnerable to Directory Traversal.
Impact
CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsimple | Cmsimple | Version 5.4 |