CVE-2017-7255

Publication date

2017-03-24 15:00:00

Family

mitre

State

PUBLISHED

Description

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_title parameter. Someone must login to conduct the attack.