CVE-2019-10105

CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager...

CVE-2019-10105

CMS Made Simple 2.2.10 contains a Self-XSS vulnerability in the Layout Design Manager, triggered by the “Name” field during the “Create a new Template” action. The issue is documented across multiple sources (NVD CVE-2019-10105, Red Hat advisory, CNVD, PRION, etc.) with consistent language that t...