First published: Sun Oct 06 2019(Updated: )
CMS Made Simple (CMSMS) 2.2.11 allows XSS via the Site Admin > Module Manager > Search Term field.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Cmsmadesimple Cms Made Simple | =2.2.11 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-17226 is a vulnerability in CMS Made Simple (CMSMS) 2.2.11 that allows XSS via the Site Admin > Module Manager > Search Term field.
CVE-2019-17226 has a severity rating of medium, with a score of 4.8 out of 10.
CVE-2019-17226 affects CMS Made Simple version 2.2.11.
The XSS vulnerability in CMS Made Simple can be exploited via the Site Admin > Module Manager > Search Term field.
Yes, upgrading to a patched version of CMS Made Simple is recommended to fix CVE-2019-17226.