<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent sightings.</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent sightings.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 07 Oct 2026 17:23:49 +0000</lastBuildDate>
    <item>
      <title>38f7edd3-2903-44a5-8c96-49dd438c8eca</title>
      <link>https://vulnerability.circl.lu/sighting/38f7edd3-2903-44a5-8c96-49dd438c8eca/export</link>
      <description>{"uuid": "38f7edd3-2903-44a5-8c96-49dd438c8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\"&amp;gt;\n\"&amp;gt;\n63311';alert(1)//812\n//--&amp;gt;\"&amp;gt;'&amp;gt;\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:07.491358Z"}</description>
      <content:encoded>{"uuid": "38f7edd3-2903-44a5-8c96-49dd438c8eca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\"&amp;gt;\n\"&amp;gt;\n63311';alert(1)//812\n//--&amp;gt;\"&amp;gt;'&amp;gt;\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-08T10:00:07.491358Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/38f7edd3-2903-44a5-8c96-49dd438c8eca/export</guid>
      <pubDate>Tue, 08 Sep 2026 10:00:07 +0000</pubDate>
    </item>
    <item>
      <title>1e5cbc68-3dcf-434d-8882-7b4a7a519da9</title>
      <link>https://vulnerability.circl.lu/sighting/1e5cbc68-3dcf-434d-8882-7b4a7a519da9/export</link>
      <description>{"uuid": "1e5cbc68-3dcf-434d-8882-7b4a7a519da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "seen", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\"&amp;gt;\n\"&amp;gt;\n63311';alert(1)//812\n//--&amp;gt;\"&amp;gt;'&amp;gt;\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:45.825391Z"}</description>
      <content:encoded>{"uuid": "1e5cbc68-3dcf-434d-8882-7b4a7a519da9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "seen", "source": "https://t.me/hacking_Attack/5996", "content": "Exploit Collector\nCMS Made Simple 2.2.15 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-Q0zmt52Iz_s/WWlvCi1SqRI/AAAAAAAAIKo/56GGQ_7zLBsvaLtYw9wmjI_Jb6z2oza2QCLcBGAs/s1600/h129.png \nCMS Made Simple version 2.2.15 suffers from a reflective cross site scripting vulnerability.\n\nMD5 | 1bd97d4c76ab1904826cf2601e327f7c\n\nDownload\n# Exploit Title: CMS Made Simple 2.2.15 - 'title' Cross-Site Scripting (XSS)\n# Date: 2021/03/19\n# Exploit Author: bt0\n# Vendor Homepage: http://www.cmsmadesimple.org/\n# Software Link: https://s3.amazonaws.com/cmsms/downloads/14832/cmsms-2.2.15-install.zip\n# Version: 2.2.15\n# CVE: CVE-2021-28935 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-28935\n\n-----------------------------------------------------------\n\nIf you log into Admin panel and open My Preferences you could be able to exploit XSS in title field\n\nReflected XSS in /admin/addbookmark.php\n\nSome payloads that works:\n\n\"&amp;gt;\n\"&amp;gt;\n63311';alert(1)//812\n//--&amp;gt;\"&amp;gt;'&amp;gt;\n\n------------------------------------------------------------\n\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:45.825391Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/1e5cbc68-3dcf-434d-8882-7b4a7a519da9/export</guid>
      <pubDate>Tue, 01 Sep 2026 20:02:45 +0000</pubDate>
    </item>
    <item>
      <title>e1f29205-69c0-4417-ae93-ec024875ed41</title>
      <link>https://vulnerability.circl.lu/sighting/e1f29205-69c0-4417-ae93-ec024875ed41/export</link>
      <description>{"uuid": "e1f29205-69c0-4417-ae93-ec024875ed41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/240", "content": "CVE-2021-28935 CMS Made Simple 2.2.15 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28935_CMS_Made_Simple_2.2.15_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:25:28.000000Z"}</description>
      <content:encoded>{"uuid": "e1f29205-69c0-4417-ae93-ec024875ed41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-28935", "type": "published-proof-of-concept", "source": "https://t.me/pwnwiki_zhchannel/240", "content": "CVE-2021-28935 CMS Made Simple 2.2.15 XSS\u6f0f\u6d1e\nhttps://www.pwnwiki.org/index.php?title=CVE-2021-28935_CMS_Made_Simple_2.2.15_XSS%E6%BC%8F%E6%B4%9E", "creation_timestamp": "2021-04-22T11:25:28.000000Z"}</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/sighting/e1f29205-69c0-4417-ae93-ec024875ed41/export</guid>
      <pubDate>Thu, 22 Apr 2021 11:25:28 +0000</pubDate>
    </item>
  </channel>
</rss>
