CMS Made Simple Forums

an audit was dinging us for an XSS vulnerability related to the search form on the website.  basically, a request for...     GET /cgi-bin/blah blah blah; results in our 404 page, which includes...     blah blah blah;">           i'm pretty sure that no modern browser is going to parse a inside ...

PHP 5.2.6, safe mode is disabled. from the server access log, i'm guessing that xajax is the thing i'm looking for? is the server-side code in the same directory tree?  because i only see requests for the client-side javascript. hmm... javascript is definitely executing in the web browser, though. w...

this is a bit curious, and i suspect that its something more or less specific to me, but i figured i'd ask. i've had both CMSMS 1.2.4 and now 1.6 installed.  in either version, in the list of pages (Content -> Pages), many of the various icons associated with each page don't do anything when i click...