CVE-2020-22842: XSS
First published: Wed Sep 30 2020(Updated: )
CMS Made Simple before 2.2.15 allows XSS via the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cmsmadesimple Cms Made Simple | <2.2.15 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2020-22842.
What software versions are affected by CVE-2020-22842?
CMS Made Simple versions up to and excluding 2.2.15 are affected by CVE-2020-22842.
How does CVE-2020-22842 allow XSS?
CVE-2020-22842 allows XSS through the m1_mod parameter in a ModuleManager local_uninstall action to admin/moduleinterface.php.
What is the severity rating of CVE-2020-22842?
CVE-2020-22842 has a severity rating of medium, with a CVSS score of 5.4.
Is there a fix available for CVE-2020-22842?
Yes, updating CMS Made Simple to version 2.2.15 or newer will fix the vulnerability.
- collector/nvd-index
- vendor/cmsmadesimple
- canonical/cmsmadesimple cms made simple