1. Login into the Admin Console of CMS made simple. 2. Navigate to My Preference > Manage Shortcuts. 3. Click on Add Shortcuts 4. In the Title parameter, inject the XSS payload: <script>alert(document.cookie)</script> 5. Submit the form after filling the form. A XSS alert will pop up with user session cookie.
Date: 2023-10-05 23:17 Posted By: Matt Hornsby (DIGI3) (DIGI3) Please see https://www.cmsmadesimple.org/community/get-involved/report-a-vulnerability
Updated: 2023-10-05 23:17 resolution_id: => 5
Back to List
