CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter.

Published Apr 11, 2018 · Updated Sep 16, 2024 · Assigned by mitre