medium5.4
CVE-2019-10017
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Impact
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | Version 2.2.10 |