CMS Made Simple v2.2.15 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the parameter m1_fmmessage.
- http://dev.cmsmadesimple.org/bug/view/12503
No PoCs found on GitHub currently.