2 matches found
CVE-2020-36415: Improper Neutralization of Input During Web Page Generation
A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module...
5.4CVSS6AI score0.00473EPSS
SaveExploits1References2
PT-2021-12053
Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross-site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Create a new Stylesheet parameter under the...
5.4CVSS0.00473EPSS
SaveExploits1References3
20