CVE-2019-10017
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Published: 2019-03-24 · CVSS: Unscored
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7