← All advisories

Medium severity5.4NVD Advisory· Published Mar 20, 2020· Updated Jun 17, 2026

CVE-2020-10681

CVE-2020-10681

Description

The Filemanager in CMS Made Simple 2.2.13 has stored XSS via a .pxd file, as demonstrated by m1_files[] to admin/moduleinterface.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.13:*:*:*:*:*:*:*
CMS Made Simple/CMS Made Simpledescription
Cmsmadesimple/FileManagerllm-create
Range: =2.2.13
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.13

Patches

Vulnerability mechanics

References

1

dev.cmsmadesimple.org/bug/view/12274nvdExploitVendor Advisory

News mentions

0

No linked articles in our index yet.