| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | ≤ 1.12.2 | |
| form builder | ≤ 0.8.1.5 |
CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to execute PHP code via the cntnt01fbrp_forma_form_template parameter in admin_store_form.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free