CVE-2017-6556 - Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field

Published Mar 9, 2017

5.4

MEDIUM

CVSS 3.0

EPSS 0.61%

Description

Cross-site scripting (XSS) vulnerability in CMS Made Simple (CMSMS) 2.1.6 allows remote authenticated users to inject arbitrary web script or HTML via the "adminpage > sitesetting > General Settings > globalmetadata" field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://www.daimacn.com/?id=8
x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/96933
vdb-entryx_refsource_BID

Link	Providers	Tags
http://www.daimacn.com/?id=8		x_refsource_MISCExploitThird Party Advisory
http://www.securityfocus.com/bid/96933		vdb-entryx_refsource_BID

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 9, 2017

Updated Aug 5, 2024

Reserved Mar 9, 2017

Link CVE-2017-6556

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2017-6556

Red Hat

Severity n/a

Public date n/a

Links CVE-2017-6556