CMS Made Simple admin/moduleinterface.php Reflective Cross-Site Scripting Vulnerability

CMS Made Simple is a content management system developed using PHP, MySQL and Smarty template engine. A reflected cross-site scripting vulnerability exists in admin/moduleinterface.php in CMS Made Simple 2.2.7. The vulnerability can be exploited to conduct cross-site scripting attacks via the...

CVE-2018-10032

CMS Made Simple aka CMSMS 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1version parameter...

PT-2018-9637

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Reflected XSS in the admin/moduleinterface.php file via the m1 version parameter. Recommendations: For version 2.2.7, avoid using the m1 version parameter in the...