Cross-Site Scripting in CMSimple v5.15 by CMSimple
CVE-2024-32345

Currently unrated

Key Information:

Vendor

CMSimple

Status
Vendor
CVE Published:
17 April 2024

What is CVE-2024-32345?

A cross-site scripting (XSS) vulnerability has been identified in the Settings menu of CMSimple version 5.15. This issue allows attackers to execute arbitrary web scripts or HTML through a specially crafted payload injected into the Configuration parameter located in the Language section. By exploiting this vulnerability, malicious users can manipulate web pages viewed by other users, jeopardizing data integrity and user safety. It is essential for users of CMSimple v5.15 to apply necessary security measures to mitigate the risks associated with this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.