Security Advisory
CVE-2019-9058
7.2
HIGH
Vulnerability Description
An issue was discovered in CMS Made Simple 2.2.8. In the administrator page admin/changegroupperm.php, it is possible to send a crafted value in the sel_groups parameter that leads to authenticated object injection.
Published Date
March 26, 2019
Official Source
NIST NVD Advisory