CVE-2023-43359

2023-10-1900:00:00

mitre

www.cve.org

cross site scripting

vulnerability

content manager menu

cmsmadesimple v.2.2.18

6.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.8%

JSON

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Page Specific Metadata and Smarty data parameters in the Content Manager Menu component.

References

github.com/sromanhu/CVE-2023-43359-CMSmadesimple-Stored-XSS----Content-Manager