CVE-2017-16783

9.8
CRITICALCVSS v3.1 Base Score
7.97%
LOW RiskEPSS (95th percentile)
CWE-94

In CMS Made Simple 2.1.6, there is Server-Side Template Injection via the cntnt01detailtemplate parameter.

Published: 11/10/2017
Modified: 6/17/2026
Back to CVE Lookup

Vulnerability Summary

CVSS v3 Score

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2 Score

7.5

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS Score (Exploitation Probability)

7.97%LOW Exploitation Risk
95th percentile

This vulnerability has a 7.97% probability of being exploited in the next 30 days, ranking higher than 95% of all scored CVEs.

CWE Classification

CWE-94

Learn More

CVSS Calculator

View this score breakdown or calculate a custom score

Understanding CVSS Scoring

Learn how severity scores are calculated and what they mean

CVE Prioritization Guide

Best practices for deciding which vulnerabilities to address first

What is a CVE?

Essential guide to Common Vulnerabilities and Exposures

CVE vs CWE Explained

Understand how CVEs relate to underlying weakness types

Advertisement