CVE-2024-57547

HIGH 7.5CVE-2024-57547 · Published 27/01/2025 · updated 17/06/2026

In short

CVE-2024-57547 is a HIGH (CVSS 7.5) vulnerability affecting cmsimple (cmsimple).
Chance of exploitation in the next 30 days (EPSS): 0.56%, higher than 46.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
cmsimple cmsimple	`= 5.16`	No fix yet

Description

Insecure Permissions vulnerability in CMSimple v.5.16 allows a remote attacker to obtain sensitive information via a crafted script to the Functionality of downloading php backup files.

References

gist.github.com/h4ckr4v3n/afbb87b5a05f283dbee705709c2769eb · Third Party Advisory
h4ckr4v3n/cmsimple5.16_research · Exploit

More vulnerabilities in cmsimple

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

cmsimple

= 5.16

No fix yet

More vulnerabilities in cmsimple

See all →