Security Advisory
CVE-2018-10081
9.8
CRITICAL
Vulnerability Description
CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.
Published Date
April 13, 2018
Official Source
NIST NVD Advisory