CVE-2020-36414
02.07.2021, 18:15
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "URL (slug)" or "Extra" fields under the "Add Article" feature.
Vendor | Product | Version |
---|---|---|
cmsmadesimple | cms_made_simple | 2.2.14 |
𝑥
= Vulnerable software versions