CVE-2018-20464

Published: 2018-12-25T23:29Z

Last Modified: 2024-11-21T04:01Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

There is a reflected XSS vulnerability in the CMS Made Simple 2.2.8 admin/myaccount.php. This vulnerability is triggered upon an attempt to modify a user's mailbox with the wrong format. The response contains the user's previously entered email address. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt