cmsmadesimple cms made simple 2.2.14 vulnerabilities and exploits

(subscribe to this query)

3.5

CVSSv2

Cross Site Scripting (XSS) vulnerablity in CMS Made Simple 2.2.14 via the Logic field in the Content Manager feature.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

Cross Site Scripting (XSS) vulnerability in CMS Made Simple 2.2.14 in "Extra" via 'News > Article" feature.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

A cross-site scripting (XSS) vulnerability exists in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an malicious user to execute arbitrary web scripts.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

CMS Made Simple 2.2.14 allows an authenticated user with access to the Content Manager to edit content and put persistent XSS payload in the affected text fields. The user can get cookies from every authenticated user who visits the website.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

CMS Made Simple 2.2.14 exists to contain a cross-site scripting (XSS) vulnerability which allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.

Cmsmadesimple Cms Made Simple 2.2.14

6.5

CVSSv2

CMS Made Simple 2.2.14 allows Authenticated Arbitrary File Upload because the File Manager does not block .ptar files, a related issue to CVE-2017-16798.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

CMS Made Simple (CMSMS) 2.2.14 allows stored XSS via the Extensions > Fie Picker..

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated malicious users to execute arbitrary web scripts or HTML via a crafted payload entered into the "Add Category" parameter under the "Categories" module.

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated malicious users to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the &qu...

Cmsmadesimple Cms Made Simple 2.2.14

3.5

CVSSv2

A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated malicious users to execute arbitrary web scripts or HTML via a crafted payload entered into the "Path for the {page_image} tag:" or "Path for thumbnail field:" paramete...

Cmsmadesimple Cms Made Simple 2.2.14

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook