Cms Made Simple@2.2.14 Security Vulnerabilities and Issues — Cms Made Simple@2.2.14 CVE List

Lucene search

CmsmadesimpleCms Made Simple2.2.14

3 matches found

CVE•added 2020/10/01 2:15 p.m.•55 views

CVE-2020-24860

CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website.

5.4CVSS5.1AI score0.00634EPSS

CVE•added 2020/06/19 5:15 p.m.•30 views

CVE-2020-14926

CMS Made Simple 2.2.14 allows XSS via a Search Term to the admin/moduleinterface.php?mact=ModuleManager page.

5.4CVSS5.1AI score0.00302EPSS

CVE•added 2020/08/14 3:15 p.m.•30 views

CVE-2020-17462

CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798.

7.8CVSS5.4AI score0.00437EPSS