CVE-2018-5964: Cmsmadesimple CMS Made Simple

Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days.

CMS Made Simple (CMSMS) 2.2.5 has XSS in admin/moduleinterface.php via the m1_messages parameter.

Affected products

• Cmsmadesimple CMS Made Simple: version 2.2.5 only

Published 2018-01-25. Last modified 2026-06-17.