CMS Made Simple version 1.x Form Builder before version 0.8.1.6 allows remote attackers to conduct information-disclosure attacks via exportxml.
| Software | From | Fixed in |
|---|---|---|
| cmsmadesimple / form_builder | - | 0.8.1.5.x |
| cmsmadesimple / cms_made_simple | - | 1.12.2.x |