CVE-2018-20464

There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2018-12-25

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• https://github.com/Xmansec/cmsms_vul