CVE-2006-6844: XSS
Published Dec 31, 2006
·Updated
Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple=1.0.2
Event History
Dec 31, 2006
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Jan 3, 2007
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-6844?
CVE-2006-6844 has a moderate severity level as it allows for cross-site scripting attacks which can lead to data theft or manipulation.
2
How do I fix CVE-2006-6844?
To fix CVE-2006-6844, update CMS Made Simple to a version later than 1.0.2 that addresses this vulnerability.
3
What versions of CMS Made Simple are affected by CVE-2006-6844?
CVE-2006-6844 affects CMS Made Simple version 1.0.2.
4
What is cross-site scripting in the context of CVE-2006-6844?
Cross-site scripting, in the context of CVE-2006-6844, refers to the injection of malicious scripts into web pages viewed by users.
5
Can CVE-2006-6844 be exploited by unauthenticated users?
Yes, CVE-2006-6844 can be exploited by unauthenticated users through the user comment form.