Skip to content
OpenAdvisories

Vendor

CMS Made Simple

3 known vulnerabilities.

Products

CMS Made Simple 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.4
    CVE-2024-1529

    Cross-site Scripting in CMS Made Simple

    Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to …

    CMS Made Simple CMS Made Simple
  • High 7.4
    CVE-2024-1528

    Cross-site Scripting in CMS Made Simple

    CMS Made Simple version 2.2.14, does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/moduleinterface.php, in multiple parameters. This vulnerability could allow a remote attacker to send a …

    CMS Made Simple CMS Made Simple