CVE Watch8 sept 2026

CVE-2026-78834

A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page con

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 8 sept 2026 · Última mod.: 8 sept 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.

Referencias oficiales

gist.github.comhttps://gist.github.com/AEQ3/574cb644306776a9ff1a0de30b085e62
github.comhttps://github.com/AEQ3/CVE/issues/1

CVEs relacionados

Sin CVEs relacionados por CWE o producto.