Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2023-36970

Disclosure Date: July 06, 2023 (last updated October 08, 2023)
A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17 allows remote attackers to inject arbitrary web script or HTML via the File Upload function.
Attacker Value
Unknown

CVE-2023-36969

Disclosure Date: July 06, 2023 (last updated October 08, 2023)
CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution via the File Upload Function.