CVE-2019-10107
CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.
Published: 2019-03-26 · CVSS: Unscored
CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7