CVE-2018-10033

CMS Made Simple (aka CMSMS) 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter.

Score

CVSS 3.0 4.8 Medium

Status

Modified - cve@mitre.org

Published

2018-04-11

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• https://github.com/zxyxx/cmsms_vul