CVE-2018-18271: XSS
Published Oct 12, 2018
·Updated
XSS exists in CMS Made Simple version 2.2.7 via the m1extra parameter in an admin/moduleinterface.php "Content-->News-->Add Article" action.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple=2.2.7
Event History
Oct 12, 2018
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-18271?
CVE-2018-18271 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2018-18271?
To fix CVE-2018-18271, upgrade CMS Made Simple to version 2.2.8 or later.
3
What type of vulnerability is CVE-2018-18271?
CVE-2018-18271 is a Cross-Site Scripting (XSS) vulnerability.
4
In which action does CVE-2018-18271 occur?
CVE-2018-18271 occurs in the "Content-->News-->Add Article" action in the admin/moduleinterface.php.
5
Which version of CMS Made Simple is affected by CVE-2018-18271?
CVE-2018-18271 affects CMS Made Simple version 2.2.7.