Vulnerability in Cmsmadesimple Cms Made Simple

CVE-2006-6844

Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.

EPSS: 0.013 (67.5th percentile) — read the EPSS interpretation.

Affected products

Cmsmadesimple Cms_made_simple — versions 1.0.2
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)