Approved changes feed: RSS · Atom

cpe:2.3:a:cmsmadesimple:cms_made_simple:0.11:beta5:*:*:*:*:*:*

part: a version: 0.11 update: beta5

VendorCmsmadesimple (8ed73986-e506-5acb-a027-f2d81aed9376)
ProductCms Made Simple (3c989cef-25f4-5ecb-b903-28c284166358)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:cmsmadesimple/cmsmadesimple purl2cpe 2026-06-01 10:12:04.242643
pkg:github/cmsmadesimple/cmsmadesimple-2-0 purl2cpe 2026-06-01 10:12:04.242645

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-1992 vulnerable 2026-06-08 05:00:52.220046 Details available
Cross-site scripting (XSS) vulnerability in admin/edituser.php in CMS Made Simple 1.10.3 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter (aka the Email Address field in the Edit User template).
Published: 2012-04-11T10:00:00.000Z
Updated: 2024-08-06T19:17:27.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3883 vulnerable 2026-06-08 04:55:17.742672 Details available
Cross-site request forgery (CSRF) vulnerability in the Change Group Permissions module in CMS Made Simple 1.7.1 and earlier allows remote attackers to hijack the authentication of arbitrary users for requests that make permission modifications.
Published: 2010-10-08T20:00:00.000Z
Updated: 2024-09-16T23:06:00.139Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3882 vulnerable 2026-06-08 04:55:17.729203 Details available
Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.7.1 and earlier allow remote attackers to inject arbitrary web script or HTML via input to the (1) Add Pages, (2) Add Global Content, (3) Edit Global Content, (4) Add Article, (5) Add Category, (6) Add Field Definition, or (7) Add Shortcut module.
Published: 2010-10-08T20:00:00.000Z
Updated: 2024-09-16T20:36:49.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-1482 vulnerable 2026-06-08 04:54:08.357663 Details available
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the date_format_string parameter.
Published: 2010-05-12T15:00:00.000Z
Updated: 2024-09-16T23:41:29.955Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.