VulnSocial

CVE-2026-4225Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/listusers.php of the component User Management Module. Performing a manipulation of the argument Message results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-16: 2Technical Details · 2026-03-16: 103-16
Signal classification2 categories
Disclosure
150.0%
General
150.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-4225 A security flaw has been discovered in CMS Made Simple up to 2.2.21. Impacted is an unknown function of the file admin/listusers.php of the component User Management Mo… https://www.cve.org/CVERecord?id=CVE-2026-4225

    Post summary

    A new vulnerability (CVE‑2026‑4225) has been announced in CMS Made Simple up to version 2.2.21, affecting an unknown function in admin/listusers.php, but no PoC, patch, or exploitation details are disclosed.

    00000142
    56.7K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    General

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-4225 - CMS Made Simple User Management listusers.php cross site scripting Intel Report: https://ift.tt/J0Q2o8V

    Post summary

    The alert announces CVE‑2026‑4225, a cross‑site scripting flaw in CMS‑Made Simple’s listusers.php, but provides no evidence of exploitation, patching, or a PoC.

    0000044
    335 followersView on X

Explore more

Back to dashboard