2018-12-20 22:00:00
mitre
PUBLISHED
panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature.