Cmsmadesimple File Manager vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cmsmadesimple File Manager: 1 record(s), with affected versions and fixes.
cpe:2.3:a:cmsmadesimple:file_manager

CVE-2025-63678 High · 7.2 CWE-434 Nov 10, 2025

Unrestricted Upload of File with Dangerous Type in Cmsmadesimple File Manager

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.