| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | = 2.2.8 |
An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted __FEU__ cookie, and achieve authenticated object injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free