Security Advisory
CVE-2017-7257
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
XSS exists in the CMS Made Simple (CMSMS) 2.1.6 "Content-->News-->Add Article" feature via the m1_content parameter. Someone must login to conduct the attack.