CVE-2018-18270

XSS exists in CMS Made Simple version 2.2.7 via the m1_news_url parameter in an admin/moduleinterface.php "Content–>News–>Add Article" action.

Source: CVE-2018-18270