CVE-2020-13427

CVE-2020-13427

Victor CMS 1.0 has Persistent XSS in admin/users.php?source=add_user via the user_name, user_firstname, or user_lastname parameter.

Source: CVE-2020-13427