CVE-2021-43154: Cmsmadesimple CMS Made Simple

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability exists in CMS Made Simple 2.2.15 via the Name field in an Add Category action in moduleinterface.php.

Affected products

• Cmsmadesimple CMS Made Simple: version 2.2.15 only

Published 2022-04-13. Last modified 2026-06-17.