PT-2020-15235 · Cmsms · Showtime2 Slideshow+1

Published 2020-12-17 · Updated 2020-12-18 · CVE-2020-20138

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions CMS Made Simple (CMSMS) version 2.2.4

Description A Cross Site Scripting (XSS) issue exists in the Showtime2 Slideshow module. This allows for potential malicious script execution.

Recommendations For CMS Made Simple (CMSMS) version 2.2.4, update the Showtime2 Slideshow module to a version that fixes the XSS issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-20138

Affected Products

Cms Made Simple

Showtime2 Slideshow

References · 4

• 🔥 https://packetstormsecurity.com/files/160604/Flexmonster-Pivot-Table-And-Charts-2.7.17-Cross-Site-Scripting.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-20138 · Security Note
• https://osv.dev/vulnerability/CVE-2020-20138 · Vendor Advisory
• https://t.me/cibsecurity/21034 · Telegram Post