CMS Made Simple 跨站脚本漏洞

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engine. A cross-site scripting vulnerability exists in CMS Made Simple 2.2.15. The vulnerability can be exploited via /admin/addbookmark.php via Site Admin My Preferences Title field ...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...