Description
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Categories" module.
Unscored
CVE-2020-36409
EUVD-2020-23937GHSA-7g68-2g58-wx86
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or H…
Published Jul 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre