CVE-2006-6844

CVE-2006-6844

EPSS 1.3%

Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the user comment form.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/2087 http://securitytracker.com/id?1017445 http://www.l0j1k.com/security/CMSMadeSimple_1.0.2_25Dec06.txt http://www.securityfocus.com/archive/1/455306/100/0/threaded http://www.securityfocus.com/bid/21756