medium5.4
CVE-2023-43872
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
Impact
A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cmsmadesimple | Cms Made Simple | Version 2.2.18 |