Xmansec/cmsms_vul

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-20464 ↗	Dec 25, 2018Tuesday, 25 December 2018, 23:29	—	4.3 MEDIUM
There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address.