5.4
CVSSv3

CVE-2023-36970

Published: 06/07/2023 Updated: 11/07/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote malicious users to inject arbitrary web script or HTML via the File Upload function.

Vulnerable Product Search on Vulmon Subscribe to Product

cmsmadesimple cms made simple 2.2.17