Lucene search
K

14 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 12:40 p.m.5 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.9AI score0.00255EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 3:34 p.m.8 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.4CVSS5.6AI score0.00275EPSS
Exploits1
ATTACKERKB
ATTACKERKB
added 2023/10/20 10:15 p.m.1 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.2AI score0.00255EPSS
Exploits1References2
OSV
OSV
added 2023/10/20 10:15 p.m.2 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

5.4CVSS6.1AI score0.00255EPSS
Exploits1References1
Prion
Prion
added 2023/10/20 10:15 p.m.21 views

Cross site scripting

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

4.9CVSS5.6AI score0.00255EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2023/10/20 12:0 a.m.79 views

CVE-2023-43357

CMS Made Simple 2.2.18 is affected by a Cross Site Scripting vulnerability in the Manage Shortcuts Title parameter. The flaw allows a local attacker to execute arbitrary code via a crafted script. Root cause: insufficient input validation in the Title field of the Manage Shortcuts component. Impa...

5.4CVSS6.1AI score0.00255EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/10/20 12:0 a.m.4 views

PT-2023-28802 · Unknown · Cms Made Simple

Name of the Vulnerable Software and Affected Versions: CMSmadesimple version 2.2.18 Description: A Cross Site Scripting issue allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component. This enables the attacker to perform...

5.4CVSS5.7AI score0.00255EPSS
Exploits1References5
Cvelist
Cvelist
added 2023/10/20 12:0 a.m.12 views

CVE-2023-43357

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component...

6.4AI score0.00255EPSS
Exploits1References1
CNVD
CNVD
added 2021/07/05 12:0 a.m.9 views

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2021-48494)

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

5.4CVSS6.1AI score0.00275EPSS
Exploits1References1
OSV
OSV
added 2021/07/02 6:15 p.m.1 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.4CVSS6.1AI score0.00275EPSS
Exploits1References1
CVE
CVE
added 2021/07/02 5:51 p.m.58 views

CVE-2020-36408

CMS Made Simple 2.2.14 is affected by a stored XSS via the Add Shortcut field in the Manage Shortcuts module. Exploitation requires authentication, enabling attackers to inject and execute arbitrary web scripts or HTML in the context of the affected site. Affected product/version: CMS Made Simple...

5.4CVSS5.2AI score0.00275EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/07/02 5:51 p.m.11 views

CVE-2020-36408

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...

5.3AI score0.00275EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/07/02 12:0 a.m.2 views

CMS Made Simple 跨站脚本漏洞

CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...

5.4CVSS5.5AI score0.00275EPSS
Exploits1References1
0day.today
0day.today
added 2015/10/11 12:0 a.m.26 views

Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities

Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...

7.1AI score
Exploits0
Rows per page
Query Builder