Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2024-27558 2 Codelyfe, Stupid Simple 2 Stupid Simple Cms, Cms 2025-04-22 6.1 Medium
Stupid Simple CMS 1.2.4 is vulnerable to Cross Site Scripting (XSS) within the blog title of the settings.
CVE-2024-27689 2 Codelyfe, Stupid Simple 2 Stupid Simple Cms, Cms 2025-03-28 8.8 High
Stupid Simple CMS v1.2.4 was discovered to contain a Cross-Site Request Forgery (CSRF) via /update-article.php.