CVE-2018-8058: XSS
Published Mar 12, 2018
·Updated
CMS Made Simple (CMSMS) 2.2.6 has XSS in admin/moduleinterface.php via the pagedata parameter.
Affected Software
1 affected component
CMSmadesimple CMS Made Simple=2.2.6
Event History
Mar 12, 2018
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
Description
Data Sourced
via NVD·03:29 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2018-8058?
CVE-2018-8058 has been classified as a medium severity vulnerability due to its potential for cross-site scripting (XSS) attacks.
2
How do I fix CVE-2018-8058?
To fix CVE-2018-8058, update CMS Made Simple to a version later than 2.2.6 where this vulnerability has been patched.
3
What components of CMS Made Simple are affected by CVE-2018-8058?
CVE-2018-8058 specifically affects the admin/moduleinterface.php component via the pagedata parameter in CMS Made Simple 2.2.6.
4
Can CVE-2018-8058 lead to data theft or manipulation?
Yes, CVE-2018-8058 can potentially allow attackers to execute scripts in the context of the user's session, leading to data theft or manipulation.
5
Is there a workaround for CVE-2018-8058 if an update is not immediately possible?
A temporary workaround for CVE-2018-8058 may include sanitizing the pagedata parameter to prevent execution of malicious scripts.