CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cms_made_simple | Cmsmadesimple | 1.1.3.1 (including) | 1.1.3.1 (including) |