https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T16:33:40.940339+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-1529 CVE-2024-1529 — Cross-site Scripting in CMS Made Simple 2026-10-08T16:33:40.956471+00:00

Affected: CMS Made Simple, cmsmadesimple cms_made_simple

Vulnerability in CMS Made Simple 2.2.14, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /admin/adduser.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted JavaScript payload to an authenticated user and partially take over their browser session.