CVE-2007-0610

CMS Made Simple 2.7 fix1 - Cross-Site Scripting via Mailform Sender Parameter

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attackers to inject arbitrary web script or HTML via the sender parameter. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

References (4)

Core 4

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/23951

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/22250

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/31841

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/32976

Scores

EPSS 0.0101

EPSS Percentile 77.3%

Details

Status published

Products (1)

cmsmadesimple/cms_made_simple 2.7

Published Jan 31, 2007

Tracked Since Feb 18, 2026