cmsmadesimple cms made simple 2.2.18 vulnerabilities and exploits

(subscribe to this query)

7.8

CVSSv3

An issue in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted payload to the Content Manager Menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Title parameter in the News Menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the extra parameter in the news menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Global Meatadata parameter in the Global Settings Menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data parameters in the Content Manager Menu component.

Cmsmadesimple Cms Made Simple 2.2.18

5.4

CVSSv3

A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local malicious user to upload a pdf file with hidden Cross Site Scripting (XSS).

Cmsmadesimple Cms Made Simple 2.2.18

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook