Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
CmsmadesimpleCms Made Simple2.2.14

14 matches found

CVE
CVE•added 2021/07/26 9:15 p.m.•73 views

CVE-2020-23241

Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature.

4.8CVSS4.9AI score0.00507EPSS
CVE
CVE•added 2021/07/26 9:15 p.m.•55 views

CVE-2020-23240

Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature.

4.8CVSS5.1AI score0.00507EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•54 views

CVE-2020-36414

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "URL (slug)" or "Extra" fields under the "Add Article" feature.

5.4CVSS5.2AI score0.00322EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•51 views

CVE-2020-36408

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Shortcut" parameter under the "Manage Shortcuts" module.

5.4CVSS5.2AI score0.00305EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•49 views

CVE-2020-36412

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Search Text" field under the "Admin Search" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•49 views

CVE-2020-36415

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Stylesheet" parameter under the "Stylesheets" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•46 views

CVE-2020-36410

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the "Options" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•45 views

CVE-2020-36409

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Categories" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•45 views

CVE-2020-36411

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {page_image} tag:" or "Path for thumbnail field:" parameters under the "Content Editing Settings" modul...

5.4CVSS5.3AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•45 views

CVE-2020-36416

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Create a new Design" parameter under the "Designs" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/07/02 6:15 p.m.•42 views

CVE-2020-36413

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Exclude these IP addresses from the "Site Down" status" parameter under the "Maintenance Mode" module.

5.4CVSS5.2AI score0.00275EPSS
CVE
CVE•added 2021/06/01 3:15 p.m.•35 views

CVE-2020-27377

A cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an attacker to execute arbitrary web scripts.

4.8CVSS5AI score0.0031EPSS
CVE
CVE•added 2021/09/22 8:15 p.m.•30 views

CVE-2020-23481

CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.

5.4CVSS5.3AI score0.00467EPSS
CVE
CVE•added 2021/08/05 5:15 p.m.•28 views

CVE-2020-22732

CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..

4.8CVSS4.8AI score0.00533EPSS