| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | ≤ 2.2.8 |
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free