CVE-2020-36415

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module...

PT-2021-12053

Name of the Vulnerable Software and Affected Versions: CMS Made Simple version 2.2.14 Description: A stored cross-site scripting XSS issue allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Create a new Stylesheet parameter under the...

CVE-2020-36415: Improper Neutralization of Input During Web Page Generation

A stored cross scripting XSS vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module...

CVE-2018-16975: Improper Control of Generation of Code

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with...