CVE-2019-9061

An issue was discovered in CMS Made Simple 2.2.8

published March 26, 2019

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

An issue was discovered in CMS Made Simple 2.2.8. In the module ModuleManager (in the file action.installmodule.php), it is possible to reach an unserialize call with untrusted input and achieve authenticated object injection by using the "install module" feature.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01570 · 75.2th percentile
Published
2019-03-26T16:49Z
EPSS history
Timeline
  • 26 MAR 16:49Z
    An issue was discovered in CMS Made Simple 2.2.8
    cvelistv5