4 matches found
CVE-2020-36408: Improper Neutralization of Input During Web Page Generation
A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module...
PT-2021-12046
Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Add Shortcut parameter under the Manage Shortcuts...
CMS Made Simple Cross-Site Scripting Vulnerabilities
CMS Made Simple CMSMS is an open source content management system that provides developers, programmers, and website owners with a web-based version of the development and management interface. A stored cross-site scripting vulnerability exists in CMS Made Simple version 2.2.14, which can be...
Cms madesimple 1.11.12 - Persistant XSS / Full Path Disclosure Vulnerabilities
Exploit for php platform in category web applications Author : ZwX Date : 09/02/2015 Download : http://www.cmsmadesimple.fr/telecharger-cms Vendor : http://www.cmsmadesimple.fr/ Tested on : Windows 7 +=====================+ Description : +=====================+ Stored Cross Site Scripting...