The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action.

Published Apr 25, 2019 · Updated Aug 4, 2024 · Assigned by mitre