| Título | CMS Made Simple(https://www.cmsmadesimple.org/) CMS Made Simple V2.2.18 Reflected XSS |
|---|
| Descripción | Login to the administrator background, in the Extensions section, you can edit "Extensions"->"File Picker",in this step, you can Add a new profile,here we input attach vection in `Top Director` pary:
<br>"</a><svg><animate attributename="x" dur="1s" onbegin="alert(1)"></animate></svg> |
|---|
| Fuente | ⚠️ https://github.com/t34t/CVE/blob/main/CMSMS/3-Reflected-XSS-Vulnerability-in-CMS-Made-Simple-V2.2.18.md |
|---|
| Usuario | testvul (UID 58141) |
|---|
| Sumisión | 2023-11-16 13:14 (hace 3 años) |
|---|
| Moderación | 2023-11-18 10:29 (2 days later) |
|---|
| Estado | Duplicado |
|---|
| Entrada de VulDB | 180239 [CMS Made Simple 2.2.14 Fie Picker secuencias de comandos en sitios cruzados] |
|---|
| Puntos | 0 |
|---|