CVE-2018-10364

BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

Source: CVE-2018-10364