CVE-2021-28935: Improper Neutralization of Input During Web Page Generation

CMS Made Simple CMSMS 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin My Preferences Title field...