Lucene search
+L

18 matches found

Kitploit
Kitploit
•added 2026/10/05 4:03 p.m.•15 views

CVE-2023-43357-CMSmadesimple-Stored-XSS---Shortcut

CMSmadesimple Stored XSS v2.2.18 Autor: Sergio Descrição: Vulnerabilidade de Cross Site Scripting no CMSmadesimple v.2.2.18 permite que um atacante local execute código arbitrário por meio de um script elaborado no campo Title em My Preferences - Manage Shortcuts Vetores de Ataque: Scripting Uma...

5.4CVSS6.5AI score0.00461EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•17 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.9AI score0.00461EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/05/22 3:34 p.m.•19 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.4CVSS5.6AI score0.00473EPSS
SaveExploits1
attackerkb
attackerkb
•added 2023/10/20 10:15 p.m.•12 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.2AI score0.00461EPSS
SaveExploits1References2
OSV
OSV
•added 2023/10/20 10:15 p.m.•19 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.1AI score0.00461EPSS
SaveExploits1References1
Prion
Prion
•added 2023/10/20 10:15 p.m.•33 views

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

4.9CVSS5.6AI score0.00461EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/20 12:00 a.m.•3 views

CVE-2023-43357: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.5AI score0.00461EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2023/10/20 12:00 a.m.•22 views

PT-2023-28802 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component. This enables the attacker to perform...

5.4CVSS5.7AI score0.00461EPSS
SaveExploits1References5
CVE
CVE
•added 2023/10/20 12:00 a.m.•112 views

CVE-2023-43357

CMS Made Simple 2.2.18 is affected by a Cross Site Scripting vulnerability in the Manage Shortcuts Title parameter. The flaw allows a local attacker to execute arbitrary code via a crafted script. Root cause: insufficient input validation in the Title field of the Manage Shortcuts component. Impa...

5.4CVSS6.1AI score0.00461EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/10/20 12:00 a.m.•51 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

6.4AI score0.00461EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/07/05 12:00 a.m.•22 views

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-48494)

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1References1
OSV
OSV
•added 2021/07/02 6:15 p.m.•14 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.4CVSS6.1AI score0.00473EPSS
SaveExploits1References1
CVE
CVE
•added 2021/07/02 5:51 p.m.•89 views

CVE-2020-36408

CMS Made Simple 2.2.14 is affected by a stored XSS via the Add Shortcut field in the Manage Shortcuts module. Exploitation requires authentication, enabling attackers to inject and execute arbitrary web scripts or HTML in the context of the affected site. Affected product/version: CMS Made Simple...

5.4CVSS5.2AI score0.00473EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2021/07/02 5:51 p.m.•36 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.3AI score0.00473EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/07/02 12:00 a.m.•14 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

5.4CVSS5.5AI score0.00473EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2021/07/02 12:00 a.m.•5 views

PT-2021-12046

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Add Shortcut parameter under the Manage Shortcuts...

5.4CVSS0.00473EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/02 12:00 a.m.•7 views

CVE-2020-36408: Improper Neutralization of Input During Web Page Generation

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.4CVSS6AI score0.00473EPSS
SaveExploits1References2
zdt
zdt
•added 2015/10/11 12:00 a.m.•34 views

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

7.1AI score
SaveExploits0
Rows per page
Query Builder