medium6.1
CVE-2023-43339
Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Da…
Impact
Cross-Site Scripting (XSS) vulnerability in cmsmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User or Database Port components.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | Version 2.2.18 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.cmsmadesimple.org/
- https://github.com/sromanhu/CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation/blob/main/README.md
- https://github.com/sromanhu/Cmsmadesimple-CMS-Stored-XSS/blob/main/README.md
- http://www.cmsmadesimple.org/
- https://github.com/sromanhu/CVE-2023-43339-CMSmadesimple-Reflected-XSS---Installation/blob/main/README.md
- https://github.com/sromanhu/Cmsmadesimple-CMS-Stored-XSS/blob/main/README.md