Security Advisory
CVE-2018-20590
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.