https://vulnerability.circl.lu/sightings/feed 2026-10-07T17:23:54.070550+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent sightings. https://vulnerability.circl.lu/sighting/38f7edd3-2903-44a5-8c96-49dd438c8eca/export 2026-10-07T17:23:54.096679+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "38f7edd3-2903-44a5-8c96-49dd438c8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:07.491358Z"} 2026-09-08T10:00:07.491358+00:00 https://vulnerability.circl.lu/sighting/1e5cbc68-3dcf-434d-8882-7b4a7a519da9/export 2026-10-07T17:23:54.099295+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "1e5cbc68-3dcf-434d-8882-7b4a7a519da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "seen", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\">\n\">\n63311';alert(1)//812\n//-->\">'>\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:45.825391Z"} 2026-09-01T20:02:45.825391+00:00 https://vulnerability.circl.lu/sighting/e1f29205-69c0-4417-ae93-ec024875ed41/export 2026-10-07T17:23:54.099438+00:00 Automation user https://cvepremium.circl.lu/user/automation {"uuid": "e1f29205-69c0-4417-ae93-ec024875ed41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/240", "content": "CVE-2021-28935 CMS Made Simple 2.2.15 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28935_CMS_Made_Simple_2.2.15_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:25:28.000000Z"} 2021-04-22T11:25:28+00:00