Cross site scripting

2023-07-0615:15:00

PRIOn knowledge base

www.prio-n.com

cross-site scripting

cms made simple

v2.2.17

file upload

remote attackers

arbitrary web script

html

0.001 Low

EPSS

Percentile

25.1%

JSON

A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function.

CPENameOperatorVersion
cms_made_simpleeq2.2.17

CPE	Name	Operator	Version
	cms_made_simple	eq	2.2.17

References

okankurtulus.com.tr/2023/06/27/cms-made-simple-v2-2-17-stored-cross-site-scripting-xss-authenticated/

0.001 Low

EPSS

Percentile

25.1%

JSON

Related for PRION:CVE-2023-36970