CMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads, which allows remote authenticated users to upload unspecified files via unknown vectors.
| Software | From | Fixed in |
|---|---|---|
| cmsmadesimple / cms_made_simple | 1.1.3.1 | 1.1.3.1.x |