CVE-2024-33424

A cross-site scripting XSS vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Downloads parameter under the Language section...

CVE-2024-33424

The CMSimple content management system (version v5.15 ) is vulnerable to a cross-site scripting (XSS) flaw in its Settings menu . The root cause is the insufficient filtering or escaping of user-supplied input, specifically when a crafted payload is injected into the Downloads parameter under the...