| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | = 1.1.3.1 |
CMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations, which allows remote authenticated users to perform some administrative actions, as demonstrated by (1) adding a user via a direct request to admin/adduser.php and (2) reading the admin log via an "admin/adminlog.php?page=1" request.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free