The news module in CMSMS before 1.9.4.3 allows remote attackers to corrupt new articles.Referenceshttps://www.cmsmadesimple.org/2011/08/Announcing-CMSMS-1-9-4-3---Security-Release/