CVE-2017-6071

CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.

Date published : 2017-02-21

http://dev.cmsmadesimple.org/project/files/69

https://daylight-it.com/security-advisory-dlcs0001.html