CVE-2017-9668

In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action...

CVE-2017-9668: Improper Neutralization of Input During Web Page Generation

In admin\addgroup.php in CMS Made Simple 2.1.6, when adding a user group, there is no XSS filtering, resulting in storage-type XSS generation, via the description parameter in an addgroup action...

PT-2017-19104

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.1.6 Description The issue is related to a lack of XSS filtering when adding a user group in the admin interface. This results in storage-type XSS generation via the description parameter in an addgroup action...

PT-2014-3566

Name of the Vulnerable Software and Affected Versions CMS Made Simple affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via various...

CVE-2014-0334: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CMS Made Simple allow remote authenticated users to inject arbitrary web script or HTML via 1 the group parameter to admin/addgroup.php, 2 the htmlblob parameter to admin/addhtmlblob.php, the 3 title or 4 url parameter to admin/addbookmark.php,...