medium5.4
CVE-2017-7256
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter.
Impact
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | Version 2.1.6 |