mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-30 13:19:29 +02:00
765 B
765 B
CVE-2021-28935
Description
CMS Made Simple (CMSMS) 2.2.15 allows authenticated XSS via the /admin/addbookmark.php script through the Site Admin > My Preferences > Title field.
POC
Reference
- http://packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.html
- http://packetstormsecurity.com/files/162287/CMS-Made-Simple-2.2.15-Cross-Site-Scripting.html