CVE-2022-23907

CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-02-28

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Cms Made Simple (Cmsmadesimple)

References

• http://dev.cmsmadesimple.org/bug/view/12503