Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.4	EPSS 0.6%	CVE-2024-33423xss_language_cmsimple · n/a High7.4EPSS 0.6%2024-05-01CVE Database V5CVE-2024-33423 Cross-Site Scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Logout parameter under the Language section. EPSS 0.6%Vulnerability	CVE Database V5	2024-05-01
Medium	6.8	EPSS 0.5%	CVE-2024-32344xss_language_cmsimple · n/a Medium6.8EPSS 0.5%2024-04-17CVE Database V5CVE-2024-32344 A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section. EPSS 0.5%Vulnerability	CVE Database V5	2024-04-17

Page 1 of 1