CVE-2019-9058

HIGH · CVSS 7.2 EPSS 1.20%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-03-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2019-9058

Severity

HIGH

CVSS

7.2

EPSS

1.20%

Original NVD Description

An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.