CVE-2017-7256

XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content–>News–>Add Article" feature via the m1_summary parameter. Someone must login to conduct the attack.

Date published : 2017-03-24

http://www.securityfocus.com/bid/97204

http://www.03i0.com/index.php/archives/113/