← All advisories

Unrated severityNVD Advisory· Published Mar 24, 2019· Updated Aug 4, 2024

CVE-2019-10017

CVE-2019-10017

Description

CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Cmsmadesimple/Cmsmadesimpleinferred
Range: = 2.2.10
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.10

Patches

Vulnerability mechanics

References

2

dev.cmsmadesimple.org/bug/view/12001mitrex_refsource_MISC
ctrsec.io/index.php/2019/03/24/cmsmadesimple-xss-filepicker/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.