Unscored CVE-2014-2219 EUVD-2014-2259GHSA-g532-jv38-f9x7

Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 2…

Published Mar 20, 2014 · Updated Aug 6, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in whizzywig/wb.php in CMSimple Classic 3.54 and earlier, possibly as downloaded before February 26, 2014, allows remote attackers to inject arbitrary web script or HTML via the d parameter.

References

20140319 Cross-Site Scripting (XSS) in CMSimple mailing-list
66312 vdb-entry
https://www.htbridge.com/advisory/HTB23205