Security Advisory

CVE-2017-15872

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-10-24 20:00:00
Last updated 2024-09-16 16:38:00
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.