Description
A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function.
Unscored
CVE-2023-36970
EUVD-2023-40890GHSA-qr5q-3jp2-g99h
A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via th…
Published Jul 6, 2023 · Updated Nov 19, 2024 · Assigned by mitre