Security Advisory
CVE-2017-12138
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
XOOPS Core 2.5.8 has a stored URL redirect bypass vulnerability in /modules/profile/index.php because of the URL filter.