PT-2017-17153

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.1.6 Description A cross-site scripting XSS issue exists, allowing remote authenticated users to inject arbitrary web script or HTML via the m1 description parameter in the "/admin/moduleinterface.php" API endpoint,...