CVE-2019-9058

Published: 2019-03-26T17:29Z

Last Modified: 2024-11-21T04:50Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt