Approved changes feed: RSS · Atom

cpe:2.3:a:cmsmadesimple:cms_made_simple:2.2.10:*:*:*:*:*:*:*

part: a version: 2.2.10 update: *

VendorCmsmadesimple (8ed73986-e506-5acb-a027-f2d81aed9376)
ProductCms Made Simple (3c989cef-25f4-5ecb-b903-28c284166358)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:cmsmadesimple/cmsmadesimple purl2cpe 2026-06-01 10:12:04.294405
pkg:github/cmsmadesimple/cmsmadesimple-2-0 purl2cpe 2026-06-01 10:12:04.294407

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-11226 vulnerable 2026-06-08 05:12:36.675088 Details available
CMS Made Simple 2.2.10 has XSS via the m1_name parameter in "Add Article" under Content -> Content Manager -> News.
Published: 2019-06-05T17:56:04.000Z
Updated: 2024-08-04T22:48:08.995Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10107 vulnerable 2026-06-08 05:12:22.252873 Details available
CMS Made Simple 2.2.10 has XSS via the myaccount.php "Email Address" field, which is reachable via the "My Preferences -> My Account" section.
Published: 2019-03-26T21:52:45.000Z
Updated: 2024-08-04T22:10:09.933Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10106 vulnerable 2026-06-08 05:12:22.251857 Details available
CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.
Published: 2019-03-26T21:52:33.000Z
Updated: 2024-08-04T22:10:09.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10105 vulnerable 2026-06-08 05:12:22.251435 Details available
CMS Made Simple 2.2.10 has a Self-XSS vulnerability via the Layout Design Manager "Name" field, which is reachable via a "Create a new Template" action to the Design Manager.
Published: 2019-03-26T21:52:22.000Z
Updated: 2024-08-04T22:10:09.782Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10017 vulnerable 2026-06-08 05:12:21.921984 Details available
CMS Made Simple 2.2.10 has XSS via the moduleinterface.php Name field, which is reachable via an "Add a new Profile" action to the File Picker.
Published: 2019-03-24T21:31:47.000Z
Updated: 2024-08-04T22:10:09.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.