CVE-2026-78834
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported …
Published: 2026-09-08 · CVSS: 8.8 · CVSS 3.1
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7