CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.
- https://daylight-it.com/security-advisory-dlcs0001.html
No PoCs found on GitHub currently.