Stupid Simple CMS

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injectionCVE-2023-6901codelyfe · CVSS 7.3 · 2.9% likely

   CWE-78

2. codelyfe Stupid Simple CMS Login Page excessive authenticationCVE-2024-3202codelyfe · CVSS 3.7 · 1.2% likely

   CWE-307

3. codelyfe Stupid Simple CMS Deletion Interface delete.php improper authenticationCVE-2023-6907codelyfe · CVSS 5.4 · 1.2% likely

   CWE-287

4. codelyfe Stupid Simple CMS upload.php unrestricted uploadCVE-2023-6902codelyfe · CVSS 5.5 · 1.0% likely

   CWE-434

5. codelyfe Stupid Simple CMS rename.php path traversalCVE-2023-7041codelyfe · CVSS 5.4 · 0.9% likely

   CWE-24

6. codelyfe Stupid Simple CMS rename.php path traversalCVE-2023-7040codelyfe · CVSS 4.3 · 0.8% likely

   CWE-24

7. Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.CVE-2024-27558Codelyfe · CVSS 6.1 · 0.4% likely

   CWE-79

8. Stupid Simple CMS <=1.2.4 is vulnerable to Cross Site Scripting (XSS) in the editing section of the article content.CVE-2024-22714Codelyfe · CVSS 6.1 · 0.4% likely

   CWE-79

9. Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.CVE-2024-27689Codelyfe · CVSS 8.8 · 0.3% likely

   CWE-352

10. Stupid Simple CMS <=1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /admin-edit.php.CVE-2024-22715Codelyfe · CVSS 8.8 · 0.3% likely

    CWE-352

11. Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /save_settings.phpCVE-2024-27559Codelyfe · CVSS 6.3 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.