CVE-2020-36412

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin Search" module...

CVE-2020-36412

CVE-2020-36412 affects CMS Made Simple 2.2.14. The vulnerability is a stored XSS in the Admin/Search module, exploitable by submitting a crafted payload into the Search Text field. The issue is reported as an authenticated vulnerability where an attacker with access to the CMS backend can execute...

CVE-2020-36412

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin Search" module...