CVE-2021-47736 | THREATINT

Description

CMSimple_XH 1.7.4 contains an authenticated remote code execution vulnerability in the content editing functionality that allows administrative users to upload malicious PHP files. Attackers with valid credentials can exploit the CSRF token mechanism to create a PHP shell file that enables arbitrary command execution on the server.

PUBLISHED Reserved 2025-12-23 | Published 2025-12-23 | Updated 2025-12-23 | Assigner VulnCheck

HIGH: 8.6CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

HIGH: 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

Improper Control of Generation of Code ('Code Injection')

Product status

1.7.4

affected

Credits

Halit AKAYDIN (hLtAkydn) finder

References

www.exploit-db.com/exploits/50367 (ExploitDB-50367) exploit

www.cmsimple-xh.org/ (Official Vendor Homepage) product

www.vulncheck.com/...mote-code-execution-via-content-editing (VulnCheck Advisory: CMSimple_XH 1.7.4 Authenticated Remote Code Execution via Content Editing) third-party-advisory

cve.org (CVE-2021-47736)

nvd.nist.gov (CVE-2021-47736)

Download JSON