| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | = 2.2.14 |
A stored cross scripting (XSS) vulnerability in CMS Made Simple 2.2.14 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the "Email address to receive notification of news submission" parameter under the "Options" module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free