CVE-2023-43339

Name of the Vulnerable Software and Affected Versions cmsmadesimple version 2.2.18

Description A Cross-Site Scripting (XSS) issue allows a local attacker to execute arbitrary code via a crafted payload injected into the Database Name, DataBase User, or Database Port components.

Recommendations For cmsmadesimple version 2.2.18, update to a newer version that contains a fix for this issue, as using a crafted payload in the Database Name, DataBase User, or Database Port components can lead to arbitrary code execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.