CVE-2026-78834
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Sep 08, 2026
Vendor
unknown
Description
A code execution vulnerability exists in CMSimple 5.22 in the CoAuthors plugin. An authenticated low-privileged user who can modify page content and provide controlled imported content can trigger server-side execution by referencing crafted external or uploaded text content through the affected content import feature.