CVE-2019-10106

PoC —

CVSS 3.0

5.4 medium

EPSS

<1%p49

Published

Mar 26, 2019 (Mar 26, 2019)

Modified

Jun 17, 2026

Description

CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section.

Vendors: cmsmadesimple
Products: cms made simple
Weakness: CWE-79
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.