CVE-2018-10033

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

CVE-2018-10030

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...

CVE-2018-10033

CMS Made Simple (CMSMS) 2.2.7 is affected by a Stored XSS in admin/siteprefs.php via the metadata parameter. The root cause is a stored XSS vulnerability in the metadata parameter of the admin/siteprefs.php page, as documented across multiple sources (CMSMS/NVD/Red Hat entries). Exploitation deta...

PT-2018-9635

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue concerns a CSRF problem located in the admin/siteprefs.php file. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...

CVE-2018-10030: Cross-Site Request Forgery (CSRF)

CMS Made Simple aka CMSMS 2.2.7 has CSRF in admin/siteprefs.php...

CVE-2018-10033: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...

PT-2018-9638

Name of the Vulnerable Software and Affected Versions: CMS Made Simple versions 2.2.7 Description: The issue is related to Stored XSS in the admin/siteprefs.php file via the metadata parameter. Recommendations: For version 2.2.7, update to a newer version that contains a fix for this issue...

CMSMadeSimple 1.11.10 Cross Site Scripting Vulnerability

CMSMadeSimple version 1.11.10 suffers from fourteen cross site scripting vulnerabilities. ============================================================== Title ...| CMSMadeSimple Multiple vulnerabilities Version .| cmsmadesimple-1.11.10-full.tar.gz Date ....| 20.02.2014 Found ...| HauntIT Blog Hom...