Vulnerabilities > Cmsmadesimple > CMS Made Simple > 2.2

DATE CVE VULNERABILITY TITLE RISK
2018-04-11 CVE-2018-10030 Cross-Site Request Forgery (CSRF) vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (aka CMSMS) 2.2.7 has CSRF in admin/siteprefs.php.
network
low complexity
cmsmadesimple CWE-352
8.8
8.8
2018-04-11 CVE-2018-10029 Cross-site Scripting vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (aka CMSMS) 2.2.7 has Reflected XSS in admin/moduleinterface.php via the m1_name parameter, related to moduledepends, a different vulnerability than CVE-2017-16799.
network
low complexity
cmsmadesimple CWE-79
4.8
4.8
2017-12-18 CVE-2017-17735 Information Exposure vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in cookies.
network
low complexity
cmsmadesimple CWE-200
critical
 9.8
9.8
2017-12-18 CVE-2017-17734 Information Exposure vulnerability in Cmsmadesimple CMS Made Simple
CMS Made Simple (CMSMS) before 2.2.5 does not properly cache login information in sessions.
network
low complexity
cmsmadesimple CWE-200
critical
 9.8
9.8