CVE-2023-6907 | codelyfe Stupid Simple CMS up to 1.2.4 Deletion Interface /file-manager/delete.php file improper authentication

A vulnerability has been found in codelyfe Stupid Simple CMS up to 1.2.4 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /file-manager/delete.php of the component Deletion Interface. The manipulation of the argument file leads to improper authentication.

This vulnerability is known as CVE-2023-6907. The attack needs to be approached within the local network. Furthermore, there is an exploit available.