Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2021-43154
Disclosure Date: April 13, 2022 (last updated February 23, 2025)
Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.
0
Attacker Value
Unknown
CVE-2022-23907
Disclosure Date: February 28, 2022 (last updated February 23, 2025)
CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
0
Attacker Value
Unknown
CVE-2022-23906
Disclosure Date: February 28, 2022 (last updated February 23, 2025)
CMS Made Simple v2.2.15 was discovered to contain a Remote Command Execution (RCE) vulnerability via the upload avatar function. This vulnerability is exploited via a crafted image file.
0
Attacker Value
Unknown
CVE-2021-28935
Disclosure Date: March 30, 2021 (last updated February 22, 2025)
CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field.
0
