CVE-2018-5964

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

Design/Logic Flaw

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

Code injection

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5964

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

CVE-2018-5965

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5965

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

CVE-2018-5963

CMS Made Simple (CMSMS) 2.2.5 contains a cross-site scripting (XSS) vulnerability in admin/addbookmark.php exploitable via the title parameter. The issue, reported in multiple sources, is a client-side script injection risk in the CMSMS admin interface; no details on exploit vectors or specific p...

CVE-2018-5964

CMS Made Simple (CMSMS) 2.2.5 is reported to have a cross-site scripting (XSS) vulnerability in admin/moduleinterface.php via the m1_messages parameter. All connected sources describe the same issue, with the vulnerability affecting the processing of that parameter in the admin interface. The NVD...

CVE-2018-5965

CMS Made Simple (CMSMS) 2.2.5 exposes a Cross-Site Scripting (XSS) vulnerability in admin/moduleinterface.php via the m1_errors parameter. The root cause, as stated, is unvalidated input being reflected, enabling script injection in the context of the admin interface. Public references in the con...

CVE-2018-5964

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

PT-2018-17253

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to XSS in the admin/moduleinterface.php file via the m1 errors parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a newer version that contains a fix for th...

CVE-2018-5965: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

PT-2018-17251

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the admin/addbookmark.php file through the title parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a...

PT-2018-17252

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to XSS in the admin/moduleinterface.php file via the m1 messages parameter. Recommendations: For CMS Made Simple version 2.2.5, avoid using the m1 messages parameter in the...

CVE-2018-5964: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

CVE-2018-5963: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CMS Made Simple File Inclusion Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMS Made Simple...