Description CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker.. References http://dev.cmsmadesimple.org/bug/view/12288