NetSight
medium4.8

CVE-2020-27377

A cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an att…

Impact

A cross-site scripting (XSS) vulnerability was discovered in the Administrator panel on the 'Setting News' module on CMS Made Simple 2.2.14 which allows an attacker to execute arbitrary web scripts.

Affected products

VendorProductAffected versions
CmsmadesimpleCms Made Simple
Version 2.2.14

Weakness classification

References