Unscored CVE-2007-0610 EUVD-2007-0608GHSA-w89w-chvm-5w5v

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web scrip…

Published Jan 31, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References

23951 third-party-advisory
22250 vdb-entry
cmsimple-sender-xss(31841) vdb-entry
32976 vdb-entry