Reflected XSS in CMS Made Simple 2.2.7 via m1_name parameter in admin/moduleinterface.php

CVE-2018-10029 · LOW Severity

AV:N/AC:M/AU:S/C:N/I:P/A:N

CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799.

Learn more about our Web Application Penetration Testing UK.