{"vulnerability": "CVE-2023-4335", "sightings": [{"uuid": "3a82f4c4-3f0c-4241-8442-339afec8264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-43357", "type": "seen", "source": "https://t.me/cibsecurity/72723", "content": "\u203c CVE-2023-43357 \u203c\n\nCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Title parameter in the Manage Shortcuts component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-21T02:35:34.000000Z"}, {"uuid": "759e1a9a-6920-45ab-ab0f-2bd941dae87f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-43354", "type": "seen", "source": "https://t.me/cibsecurity/72722", "content": "\u203c CVE-2023-43354 \u203c\n\nCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-21T02:35:33.000000Z"}, {"uuid": "a5f7bf7b-d183-4b8d-ac8a-94a80f7e29e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-43353", "type": "seen", "source": "https://t.me/cibsecurity/72719", "content": "\u203c CVE-2023-43353 \u203c\n\nCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the extra parameter in the news menu component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-21T02:35:29.000000Z"}, {"uuid": "981e7677-f406-4f6f-a1b0-2816047cc4b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-43352", "type": "seen", "source": "https://t.me/cibsecurity/73028", "content": "\u203c CVE-2023-43352 \u203c\n\nAn issue in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted payload to the Content Manager Menu component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-27T02:16:15.000000Z"}, {"uuid": "2932bad7-8809-4371-ab04-a5cd7b184f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-43356", "type": "seen", "source": "https://t.me/cibsecurity/72725", "content": "\u203c CVE-2023-43356 \u203c\n\nCross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Global Meatadata parameter in the Global Settings Menu component.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-21T02:35:36.000000Z"}]}