Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2021-28998

File upload vulnerability in CMS Made Simple through 2.2.15 allows remote authenticated attackers to gain a webshell via a crafted phar file.