| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | = 2.2.18 |
Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the password and password again parameters in the My Preferences - Add user component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free