CyberRota Analysis
AI-GeneratedCMSimple 5.24 is vulnerable due to disabled CSRF protection, allowing unauthenticated attackers to exploit this weakness by tricking a logged-in administrator into executing a forged request. This results in the potential for persistent remote code execution on the web server, as malicious scripts can be stored and executed for all visitors. Organizations using this CMS version should prioritize remediation to protect against unauthorized access and potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfProtection() into a no-op on every state-changing admin request, and it does not send the csrf_token hidden field in admin forms. Because administrator authentication is cookie-only and no CSRF token is enforced, an unauthenticated attacker can induce a logged-in administrator's browser to issue a forged content-save request with a text payload containing a scripting marker. The marker is stored verbatim into content/content.php; on every subsequent page view evaluate_cmsimple_scripting() (functions.php) executes the marker body with PHP eval() — for all visitors, including unauthenticated ones. This yields persistent remote code execution on the web server.