Security Advisory
CVE-2018-20590
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.