CVE-2017-16798: XSS
In CMS Made Simple 2.2.3.1, the isfileacceptable function in modules/FileManager/action.upload.php only blocks file extensions that begin or end with a "php" substring, which allows remote attackers to bypass intended access restrictions or trigger XSS via other extensions, as demonstrated by .phtml, .pht, .html, or .svg.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-16798?
CVE-2017-16798 has a medium severity rating as it allows remote attackers to bypass access restrictions.
How do I fix CVE-2017-16798?
To fix CVE-2017-16798, update CMS Made Simple to a version that addresses this vulnerability.
What types of attacks does CVE-2017-16798 allow?
CVE-2017-16798 allows remote attackers to trigger XSS attacks through unsupported file extensions.
Which version of CMS Made Simple is affected by CVE-2017-16798?
CVE-2017-16798 affects CMS Made Simple version 2.2.3.1.
What function is vulnerable in CVE-2017-16798?
The vulnerable function in CVE-2017-16798 is is_file_acceptable located in modules/FileManager/action.upload.php.