Security Advisory
CVE-2018-20682
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Fork CMS 5.0.6 allows stored XSS via the private/en/settings facebook_admin_ids parameter (aka "Admin ids" input in the Facebook section).