Detections
Analytics
CVE-2026-78834
high
Description
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.
References
https://github.com/AEQ3/CVE/issues/1
https://gist.github.com/AEQ3/574cb644306776a9ff1a0de30b085e62