Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2019-9056

An issue was discovered in CMS Made Simple 2.2.8. In the module FrontEndUsers (in the file class.FrontEndUsersManipulate.php or class.FrontEndUsersManipulator.php), it is possible to reach an unserialize call with an untrusted FEU cookie, and achieve authenticated object injection.

  • Published: Apr 11, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-9056
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

OWASP TOP 10:

Software From Fixed in
cmsmadesimple / cms_made_simple 2.2.8 2.2.8.x