CVE

CVE-2017-15872

admin

CVE-2017-15872

phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.

Source: CVE-2017-15872

Exit mobile version