CVE-2019-9058

An issue was discovered in CMS Made Simple 2.2.8

published March 26, 2019

CVSS
—
EPSS
1%
Percentile
67.9
In the wild
Unconfirmed
What it is

An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01200 · 67.9th percentile
Published
2019-03-26T16:40Z
EPSS history
Timeline
  • 26 MAR 16:40Z
    An issue was discovered in CMS Made Simple 2.2.8
    cvelistv5