6 matches found
CVE-2018-10033
CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...
CVE-2018-10033
CMS Made Simple (CMSMS) 2.2.7 is affected by a Stored XSS in admin/siteprefs.php via the metadata parameter. The root cause is a stored XSS vulnerability in the metadata parameter of the admin/siteprefs.php page, as documented across multiple sources (CMSMS/NVD/Red Hat entries). Exploitation deta...
PT-2018-9635
Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue concerns a CSRF problem located in the admin/siteprefs.php file. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...
CVE-2018-10033: Improper Neutralization of Input During Web Page Generation
CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...
PT-2018-9638
Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Stored XSS in the admin/siteprefs.php file via the metadata parameter. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...