CVE-2010-3882

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Category, (6) Add Field Definition, or (7) Add Shortcut module.

References

http://security.bkis.com/multiple-vulnerabilities-in-cms-made-simple/

http://secunia.com/advisories/40031

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS