PT-2021-17990

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.15 Description: The issue allows for authenticated XSS via the /admin/addbookmark.php script, specifically through the Site Admin My Preferences Title field. Recommendations: For version 2.2.15, consider disabling...

CVE-2021-28935: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...

CVE-2018-5963

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

CVE-2018-5963: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.5 has XSS in admin/addbookmark.php via the title parameter...

PT-2018-17251

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.5 Description: The issue is related to a Cross-Site Scripting XSS problem. It occurs in the admin/addbookmark.php file through the title parameter. Recommendations: For CMS Made Simple version 2.2.5, update to a...

PT-2014-3566

Name of the Vulnerable Software and Affected Versions CMS Made Simple affected versions not specified Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote authenticated users to inject arbitrary web script or HTML via various...

CVE-2010-2797: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in lib/translation.functions.php in CMS Made Simple before 1.8.1 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the defaultcmslang parameter to an admin script, as demonstrated by admin/addbookmark.php, a different...

PT-2010-4300

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions prior to 1.8.1 Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the default cms lang parameter to an admi...