CVE-2024-33423

The content management system CMSimple v5.15 is vulnerable to a Cross-Site Scripting (XSS) flaw (CWE-80) within its Settings menu . The root cause is the improper filtering of user input in the Logout parameter located under the Language section . Attackers can inject a crafted payload to execute...

CVE-2024-33424: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section...

CVE-2024-33423

Cross-Site Scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section...

PT-2024-25247 · Cmsimple · Cmsimple

Name of the Vulnerable Software and Affected Versions: CMSimple version 5.15 Description: A cross-site scripting XSS vulnerability in the Settings menu allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section...

CMSimple 安全漏洞

CMSimple is a free content management system. A security vulnerability exists in CMSimple version v5.15, which stems from the presence of a cross-site scripting XSS vulnerability that allows an attacker to execute arbitrary web script or HTML by injecting a crafted payload...

CMSimple 安全漏洞

CMSimple is a free content management system. A security vulnerability exists in CMSimple version v5.15. An attacker can exploit the vulnerability to execute arbitrary web script or HTML...

CVE-2024-33424

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section...

CVE-2024-33423

Cross-Site Scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section...

CMSimple Cross-Site Scripting Vulnerability (CNVD-2026-02656)

CMSimple is a free content management system. CMSimple suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to execute arbitrary code via the functions.php componen...

CMSimple Cross-Site Scripting Vulnerability (CNVD-2026-02657)

CMSimple is a free content management system. CMSimple suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Configuration parameter of the Settings menu, which can be exploited by an attacker to execute arbitra...

CMSimple Cross-Site Scripting Vulnerability (CNVD-2026-02658)

CMSimple is a free content management system. CMSimple suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the Edit parameter of the Settings menu, for which no detailed vulnerability details are available at this...

CVE-2024-32392

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component...

CVE-2024-32392

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component...

CVE-2024-32392

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component...

CMSimple 安全漏洞

CMSimple is a free content management system. A security vulnerability exists in CMSimple version v.5.15, which stems from a cross-site scripting vulnerability that allows remote attackers to execute arbitrary code via the functions.php component...

CVE-2024-32392: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in CmSimple v.5.15 allows a remote attacker to execute arbitrary code via the functions.php component...

CVE-2024-32392

The free content management system CmSimple v.5.15 is affected by a Cross Site Scripting (XSS) vulnerability. The root cause is a lack of effective filtering and escaping of user-supplied data within the functions.php component. This flaw allows a remote attacker to execute arbitrary code , poten...

CVE-2024-32345

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section...

CVE-2024-32344

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section...

CVE-2024-32345

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section...