⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →

CVE-2017-6556

MEDIUM · 5.4 CVSS Gepubliceerd: 09-03-2017 CWE-79

Beschrijving

Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field.

Vendors

Cmsmadesimple

Affected products

Cms Made Simple

References

www.daimacn.com
www.securityfocus.com