| Package | Affected versions | Patched versions |
|---|---|---|
| cms made simple | = 2.2.10 |
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free