CVE-2018-20464

Publication date

2018-12-25 23:00:00

Family

mitre

State

PUBLISHED

Description

There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a users mailbox with the wrong format. The response contains the users previously entered email address.