CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.

Published Feb 28, 2022 · Updated Aug 3, 2024 · Assigned by mitre