CVE-2017-15872

Published October 24th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

3.5

LOW

Affected

1

PROJECT

Description

phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.

slackero/phpwcms

Flexible, fast, powerful, customer, developer friendly web content management system and cms framework

GitHub

95