CVE-2017-7256

2017-03-24T15:59:00
ID CVE-2017-7256
Type cve
Reporter cve@mitre.org
Modified 2017-03-31T01:59:00

Description

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.