Lucene search
+L

4 matches found

NVD
NVD
•added 2018/04/11 7:29 p.m.•30 views

CVE-2018-10033

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

4.8CVSS4.9AI score0.00621EPSS
SaveExploits1References1
CVE
CVE
•added 2018/04/11 7:00 p.m.•61 views

CVE-2018-10033

CMS Made Simple (CMSMS) 2.2.7 is affected by a Stored XSS in admin/siteprefs.php via the metadata parameter. The root cause is a stored XSS vulnerability in the metadata parameter of the admin/siteprefs.php page, as documented across multiple sources (CMSMS/NVD/Red Hat entries). Exploitation deta...

4.8CVSS4.8AI score0.00621EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/11 12:00 a.m.•2 views

CVE-2018-10033: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

4.8CVSS5.5AI score0.00621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/04/11 12:00 a.m.•4 views

CVE-2018-10030: Cross-Site Request Forgery (CSRF)

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...

8.8CVSS7.8AI score0.00477EPSS
SaveExploits1References2
Rows per page
Query Builder