CVE-2020-36413

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP addresses from the "Site Down" status" parameter under the "Maintenance Mode" module...

PT-2021-12051

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross-site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML by entering a crafted payload into the Exclude these IP addresses from the "Site Down"...