CVE-2026-6183: medium-severity vulnerability in code-projects Simple Content Management System
code-projects Simple Content Management System index.php sql injection
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
33Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 6.9epss 0.3%
A security flaw has been discovered in code-projects Simple Content Management System 1.0. Affected by this issue is some unknown functionality of the file /web/index.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
code-projects · Simple Content Management Systempublic PoCs found — 1
cve_referencegithub.com/Xmyronn/simple-cms-sqli-id-parameterunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — code-projects Simple Content Management System
In the same product, most dangerous first.
CVE-2026-116623MEDIUMcode-projects Simple Content Management System Admin welcome.php authorizationEPSS 0.4%CVE-2026-6182MEDIUMcode-projects Simple Content Management System login.php sql injectionEPSS 0.3%CVE-2026-6184MEDIUMcode-projects Simple Content Management System welcome.php cross site scriptingEPSS 0.3%