Skip to content
OpenAdvisories
High · 7.4 CVE-2024-33423 EUVD-2024-31162GHSA-3849-33qq-vw2c

Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML v…

Published May 1, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section.

References