CVE-2023-36970

CMS Made Simple 2.2.17 is affected by a Cross-site Scripting (XSS) vulnerability that can be triggered via the File Upload function, allowing an attacker to inject arbitrary web script or HTML. The issue is documented across multiple feeds (CVE-2023-36970) and described as an XSS in CMS Made Simp...