PT-2018-14978

Name of the Vulnerable Software and Affected Versions CMSimple version 4.7.5 Description The issue allows for XSS via an admin's use of a "?file=config&action=array" URI. Recommendations For CMSimple version 4.7.5, update to a version that fixes this issue, as using the ?file=config&action=array...

CVE-2018-19507: Improper Neutralization of Input During Web Page Generation

CMSimple 4.7.5 has XSS via an admin's use of a ?file=config&action=array URI...