← All advisories

Medium severity5.4NVD Advisory· Published Mar 30, 2021· Updated Jun 17, 2026

CVE-2021-28935

CVE-2021-28935

Description

CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.15:*:*:*:*:*:*:*
CMS Made Simple/CMS Made Simpledescription
Cmsmadesimple/Cmsmsllm-create
Range: =2.2.15
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.15

Patches

Vulnerability mechanics

References

2

dev.cmsmadesimple.org/bug/view/12432nvdExploitIssue TrackingVendor Advisory
packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.htmlnvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.