CVE-2021-43742

CMSimple 5.4 is vulnerable to Cross-Site Scripting (XSS) via the file upload feature. The root cause is a lack of data validation/filtering of user-supplied data, enabling injected JavaScript on the client side. Impact and exploit details are limited to the public descriptions; no explicit in-the...