sromanhu/CVE-2023-43358-CMSmadesimple-Stored-XSS---News

sromanhu/CVE-2023-43358-CMSmadesimple-Stored-XSS---News

Releases0
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title in the Content - News Menu.

CVE History

CVEPublishedCVSS v3CVSS v2
5.4 MEDIUM

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the News Menu component.