CVE-2018-10081

PoC —

CVSS 3.0

9.8 critical

EPSS

2%p74

Published

Apr 13, 2018 (Apr 13, 2018)

Modified

Jun 17, 2026

Description

CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.

Vendors: cmsmadesimple
Products: cms made simple
Weakness: CWE-640
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.