CMSimple index.php guestbook XSS

  1. Network Vulnerabilities
  2. Web application abuses
  3. CMSimple index.php guestbook XSS
Summary
The remote host is running CMSimple, a CMS written in PHP. The version of CMSimple installed on the remote host is prone to cross-site scripting attacks due to its failure to sanitize user-supplied input to both the search and guestbook modules.
Solution
Upgrade to version 2.4 Beta 5 or higher.
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities