CMSimple 5.4 is vulnerable to Cross Site Scripting (XSS) via the file upload feature.

Published Apr 13, 2022 · Updated Aug 4, 2024 · Assigned by mitre