CVE-2024-27622 Information

Description

A remote code execution vulnerability has been identified in the User Defined Tags module of CMS Made Simple version 2.2.19. This vulnerability arises from inadequate sanitization of user-supplied input in the ‘Code’ section of the module. As a result authenticated users with administrative privileges can inject and execute arbitrary PHP code.

Reference

https://github.com/capture0x/CMSMadeSimple/