CVE-2020-36411

CMS Made Simple 2.2.14 contains a stored XSS vulnerability exploited via crafted input in the Path for the {page_image} tag: and Path for thumbnail field: parameters in the Content Editing Settings module. The issue permits authenticated users to inject and execute arbitrary web scripts/HTML in t...