PT-2018-14979

Name of the Vulnerable Software and Affected Versions CMSimple version 4.7.5 Description The issue allows for XSS via an admin's upload of an SVG file at a "?userfiles&subdir=userfiles/images/flags/" URI. Recommendations For CMSimple version 4.7.5, consider restricting access to the upload...