CVE-2017-7256

Severity: medium (CVSS 5.4 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2017-03-24 · updated 2026-06-17
Weakness: CWE-79

Description

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.

Affected products

CMS Made Simple: 2.1.6

References

http://www.03i0.com/index.php/archives/113/
http://www.securityfocus.com/bid/97204
http://www.03i0.com/index.php/archives/113/
http://www.securityfocus.com/bid/97204

Get alerted when CVE-2017-7256 or the next vulnerability affects your stack