← All advisories

Medium severity6.1NVD Advisory· Published Apr 13, 2022· Updated Jun 17, 2026

CVE-2021-43154

CVE-2021-43154

Description

Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.

Affected products

3

Cmsmadesimple/Cmsmadesimple
cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.15:*:*:*:*:*:*:*
CMS Made Simple/CMS Made Simpledescription
Simple CMS/Simple CMSllm-fuzzy
Range: =2.2.15

Patches

Vulnerability mechanics

References

1

elprofesor.me/2021/10/24/stored-cross-site-scripting-via-m1-name-authenticatednvdBroken Link

News mentions

0

No linked articles in our index yet.