PT-2019-12201

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.10 Description The issue allows for XSS via the m1 name parameter in the "Add Article" section under Content - Content Manager - News. Recommendations For CMS Made Simple version 2.2.10, update to a version that fix...

PT-2018-9634

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Reflected XSS in the admin/moduleinterface.php file via the m1 name parameter, which is connected to moduledepends. Recommendations: For version 2.2.7, consider restricting...

CMS Made Simple Cross-Site Scripting Vulnerability (CNVD-2017-36502)

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A cross-site scripting vulnerability exists in the...

CVE-2017-16799

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882...

PT-2017-14569

Name of the Vulnerable Software and Affected Versions CMS Made Simple version 2.2.3.1 Description The issue allows for stored XSS via the m1 name parameter to "admin/moduleinterface.php" during the addition of a category. Recommendations For CMS Made Simple version 2.2.3.1, avoid using the m1 nam...