CVE-2007-5443

Published: Oct 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) the anchor tag and (2) listtags.

Affected (1)

Products: Cmsmadesimple: Cms Made Simple

Cmsmadesimple

1 product

Cms Made Simple

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cmsmadesimple Cms Made Simple	Version 1.1.3.1

Related CWEs

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (10)

http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/

Source: cve@mitre.org

http://osvdb.org/42471

Source: cve@mitre.org

http://osvdb.org/42472

Source: cve@mitre.org

http://securityreason.com/securityalert/3223

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481984/100/0/threaded

Source: cve@mitre.org

http://blog.cmsmadesimple.org/2007/10/07/announcing-cms-made-simple-1141/