Cmsmadesimple

Records158All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high42CVSS 7.0–8.9

Exploited now

Cmsmadesimple records in CISA KEV

No Cmsmadesimple vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cms Made Simple 154 records HIGH Form Builder 3 records MEDIUM Bable 1 record LOW Cmsmadesimple 1 record LOW File Manager 1 record HIGH

Records

1 record in Cmsmadesimple · all components

TI-2017-12356 CVE-2017-16799 · GHSA-pc76-88h8-6rpp

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible…

LOW 25

In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882.

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00486 Published 2017-11-12 No fix listed CWE-79

Open these records in search →

Critical	9
High	42
Medium	102
Low	5
No CVSS	0