CVE-2023-43360 | BDVDB-2026-214913 Detail

Description#

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Top Directory parameter in the File Picker Menu component.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/sromanhu/CMSmadesimple-Stored-XSS---File-Picker-extension
https://github.com/sromanhu/CVE-2023-43360-CMSmadesimple-Stored-XSS---File-Picker-extension

Exploit#

No public exploit known

History#

Version 12023-10-24Record published in the CVE List.
Version 22024-09-11Most recent update recorded in the CVE List.