| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | ≤ 2.2.6 |
CMS Made Simple (CMSMS) through 2.2.6 contains a privilege escalation vulnerability from ordinary user to admin user by arranging for the eff_uid value within $_COOKIE[$this->_loginkey] to equal 1, because an SHA-1 cryptographic protection mechanism can be bypassed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free