| Package | Affected versions | Patched versions |
|---|---|---|
| cmsimple | = 5.4 |
CMSimple 5.4 contains a cross-site scripting vulnerability that allows attackers to bypass input filtering by using HTML to Unicode encoding. Attackers can inject malicious scripts by encoding payloads like ')-alert(1)// and execute arbitrary JavaScript when victims interact with delete buttons.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free