CVE-2013-3929

Cross-site scripting (XSS) vulnerability in admin/editevent.php in CMS Made Simple (CMSMS) 1.11.9 allows remote authenticated users with the "Modify Events" permission to inject arbitrary web script or HTML via the handler parameter.

Score

CVSS 2.0 2.1 Low

Status

Modified - PSIRT-CNA@flexerasoftware.com

Published

2013-12-09

Last modified

2024-08-06

Weaknesses

CWE-79

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• http://secunia.com/advisories/53920