CVE-2013-3929: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/editevent.php in CMS Made Simple CMSMS 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter...

PT-2013-4750

Name of the Vulnerable Software and Affected Versions CMS Made Simple versions 1.11.9 Description A cross-site scripting issue exists, allowing remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter in the...