Security Advisory
CVE-2018-15678
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting.