CMS Made Simple Version 2.2.19 is vulnerable to Cross Site Scripting (XSS). This vulnerability resides in the File Manager module of the admin panel. Specifically, the issue arises due to inadequate sanitization of user input in the "New directory" field.
References
| Link | Resource |
|---|---|
| https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html | Exploit VDB Entry |
| https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html | Exploit VDB Entry |
Configurations
History
28 Mar 2025, 16:07
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Cmsmadesimple
Cmsmadesimple cms Made Simple |
|
| References | () https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html - Exploit, VDB Entry | |
| CPE | cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.19:*:*:*:*:*:*:* |
21 Nov 2024, 09:04
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://packetstormsecurity.com/files/177243/CMS-Made-Simple-2.2.19-Cross-Site-Scripting.html - |
12 Nov 2024, 18:35
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-79 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
05 Mar 2024, 14:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-03-05 14:15
Updated : 2025-03-28 16:07
NVD link : CVE-2024-27625
Mitre link : CVE-2024-27625
CVE.ORG link : CVE-2024-27625
JSON object : View
Products Affected
cmsmadesimple
- cms_made_simple
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')