Security Advisory

CVE-2019-10017

5.4
MEDIUM

Vulnerability Description

CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Published Date March 24, 2019
Official Source NIST NVD Advisory