Cross site scripting

2021-07-0218:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

24.3%

JSON

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the “Email address to receive notification of news submission” parameter under the “Options” module.

CPENameOperatorVersion
cms_made_simpleeq2.2.14

CPE	Name	Operator	Version
	cms_made_simple	eq	2.2.14

References

dev.cmsmadesimple.org/bug/view/12325

0.001 Low

EPSS

Percentile

24.3%

JSON

Related for PRION:CVE-2020-36410