← Database

CVE-2021-43741

CRITICAL CVSS: 9.8 Published: 2022-04-13 Modified: 2026-06-17

Description

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicious file on config.php leading to remote code execution.

Affected Platforms

Cmsimple Cmsimple

Weakness Type

CWE-22

References