Description
CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.
Unscored
CVE-2019-10106
EUVD-2019-2149GHSA-8h9r-8mcw-2x62
CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin…
Published Mar 26, 2019 · Updated Aug 4, 2024 · Assigned by mitre