CMS Made Simple Forums

Hello everyone,

I've just had this comment left on my test site

Alert("XSS BUG")

I am using CMSms 1.0.6. Can anyone tell me what this means, and, more importantly, how to fix it?

the URL to my site is:
http://www.sjgrafx.co.uk/cms

thanks in advance,
Steve.

XSS = cross site scripting, in other words, a security hole in CMS-MS. You should upgrade to 1.0.8 as I know a couple of XSS attacks were fixed in that version as compared to 1.0.6. If it happens again, submit a bug report so that the dev team can find and plug the hole.

Tim

Thanks, Tim,

Just upgraded to 1.0.8.......
Let's see if it happens again......

what sort of things are vulnerable with these "holes"?

Steve.