CVE-2020-36416

Summary: CVE-2020-36416 is a stored XSS vulnerability in CMS Made Simple 2.2.14. An authenticated attacker can inject arbitrary web scripts/HTML through the “Create a new Design” field in the Designs module. The issue is corroborated by multiple feeds (Red Hat, NVD, CNVD, PRION/OpenVAS, CVE listi...