| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | ≤ 2.2.7 |
CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary code execution vulnerability in the admin dashboard because the implementation uses "eval('function testfunction'.rand()" and it is possible to bypass certain restrictions on these "testfunction" functions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free