Security Advisory
CVE-2017-15872
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.