Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2017-11-12	CVE-2017-16799	Cross-site Scripting vulnerability in Cmsmadesimple 2.2.3.1 In CMS Made Simple 2.2.3.1, in modules/New/action.addcategory.php, stored XSS is possible via the m1_name parameter to admin/moduleinterface.php during addition of a category, a related issue to CVE-2010-3882. network low complexity cmsmadesimple CWE-79	5.4

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.