CVE-2010-1482
N/A
Published: May 12, 2010 at 03:00 PM UTC
Updated: June 16, 2026 at 11:18 PM UTC
1 product affected across 1 vendorCmsmadesimple
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 1%
Description
Cross-site scripting (XSS) vulnerability in admin/editprefs.php in the backend in CMS Made Simple (CMSMS) before 1.7.1 might allow remote attackers to inject arbitrary web script or HTML via the date_format_string parameter.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 1.70.100.10.30.10.40.110.11 beta50.11 beta60.11.10.11.20.120.12 beta10.12 beta20.12.10.12.20.13 beta10.13 beta20.13 beta31.01.0 beta11.0 beta21.0 beta31.0 beta41.0 beta51.0 beta61.0.11.0.21.0.31.0.41.0.51.0.61.0.71.0.81.11.1 rc11.1 rc21.1 rc31.1.11.1.21.1.3.11.1.4.11.21.2 beta11.2 beta21.2 beta31.2 rc11.2.11.2.21.2.31.2.41.2.51.31.3 beta11.3 beta21.3.11.41.4 beta11.4 beta21.4.11.51.5 beta11.5.11.5.21.5.31.5.41.61.6.11.6.21.6.31.6.41.6.51.6.61.6.7
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (4)
x_refsource_CONFIRM
Source: [email protected]
http://blog.cmsmadesimple.org/2010/05/01/announcing-cms-made-simple-1-7-1-escade/x_refsource_MISCExploit
Source: [email protected]
http://int21.de/cve/CVE-2010-1482-cmsmadesimple-xss-backend.htmlMailing Listx_refsource_BUGTRAQExploit
Source: [email protected]
http://www.securityfocus.com/archive/1/511178Quick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card