CMS Made Simple 1.0.2 - Cross-Site Scripting via cntnt01searchinput Parameter
Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the cntnt01searchinput parameter in a Search action.