← All advisories

Medium severity5.4NVD Advisory· Published Mar 24, 2019· Updated Jun 17, 2026

CVE-2019-10017

CVE-2019-10017

Description

CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Cmsmadesimple/Cmsmadesimpleinferred2 versions
= 2.2.10+ 1 more
- (no CPE)range: = 2.2.10
- cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.10:*:*:*:*:*:*:*
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.10

Patches

Vulnerability mechanics

References

2

dev.cmsmadesimple.org/bug/view/12001nvdExploitVendor Advisory
ctrsec.io/index.php/2019/03/24/cmsmadesimple-xss-filepicker/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.