VULNERABILITY INTELLIGENCE

CVE-2020-23481

CVSS score5.4 MEDIUM

EPSS probability0.48%

CISA KEVNot currently listed

Published2021-09-22

Last modified2026-06-17

Description

CMS Made Simple 2.2.14 was discovered to contain a cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Field Definition text field.