CVE-2018-10029

CMS Made Simple (CMSMS) 2.2.7 is cited as having a Reflected XSS flaw in admin/moduleinterface.php via the m1_name parameter (linked to moduledepends). This CVE-2018-10029 description is explicitly differentiated from CVE-2017-16799. Across connected sources (CNVD, RH Red Hat, CNVD CNVD-2017-3650...

CVE-2018-10031: Cross-Site Request Forgery (CSRF)

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/moduleinterface.php...

PT-2018-9636

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue concerns a CSRF problem located in the admin/moduleinterface.php file. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...

CVE-2018-10029: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799...

PT-2018-9634

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Reflected XSS in the admin/moduleinterface.php file via the m1 name parameter, which is connected to moduledepends. Recommendations: For version 2.2.7, consider restricting...

PT-2018-9637

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Reflected XSS in the admin/moduleinterface.php file via the m1 version parameter. Recommendations: For version 2.2.7, avoid using the m1 version parameter in the...

CVE-2018-10032: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...

CVE-2018-8058

CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...

Code injection

CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...

CVE-2018-8058

CMS Made Simple (CMSMS) 2.2.6 contains a cross‑site scripting (XSS) vulnerability in admin/moduleinterface.php via the pagedata parameter. Affected component: CMSMS core web interface; vulnerability type: stored XSS. The CVE and related OpenVAS entry indicate multiple stored XSS vulnerabilities i...

PT-2018-18310

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.6 Description: The issue is related to stored XSS in the admin/moduleinterface.php file via the metadata parameter. Recommendations: For version 2.2.6, update to a newer version that contains a fix for this issue...

CVE-2018-8058: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter...

PT-2018-18410

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.6 Description: The issue is related to XSS in the admin/moduleinterface.php file via the pagedata parameter. Recommendations: For CMS Made Simple version 2.2.6, avoid using the pagedata parameter in the...

CVE-2018-7893: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.6 has stored XSS in admin/moduleinterface.php via the metadata parameter...

CVE-2018-5964

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

CVE-2018-5965

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

CVE-2018-5964: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1messages parameter...

PT-2018-17252

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to XSS in the admin/moduleinterface.php file via the m1 messages parameter. Recommendations: For CMS Made Simple version 2.2.5, avoid using the m1 messages parameter in the...

CVE-2018-5965: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/moduleinterface.php via the m1errors parameter...

PT-2018-17253

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to XSS in the admin/moduleinterface.php file via the m1 errors parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a newer version that contains a fix for th...