Security Advisory
CVE-2018-20806
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).