CMS Made Simple Foundation File Manager
0 remedies
cpe:2.3:a:cmsmadesimple:cms_made_simple:*:*:*:*:*:*:*
0 remedies
- 2.2.22
CMS Made Simple Foundation File Manager Arbitrary File Upload Vulnerability Allowing Code Execution
Vulnerability
A vulnerability allowing authenticated users with Administrator privileges to upload arbitrary files has been identified in the CMS Made Simple Foundation File Manager version 2.2.22. This vulnerability exists in the '/uploads/' endpoint and could be exploited by uploading a specially crafted PHP file, which would then be executed on the server.
Impact
Exploitation of this vulnerability allows for arbitrary code execution on the server where CMS Made Simple Foundation File Manager is installed.
Added: Nov 10, 2025, 11:20 PM
Updated: Nov 10, 2025, 11:20 PM
Vulnerability Rating
Custom Algorithm
spread
5.2impact
10.0exploitability
5.0remediation
0.0relevance
1.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.