ExponentCMS has an unspecified vulnerability

ExponentCMS is an open source web content management system that allows website owners to easily create and manage dynamic websites without having to directly code web pages or manage site navigation.ExponentCMS 2.6 and earlier versions have a security vulnerability that stems from a modified HTTP header that can change a link on a web page to an arbitrary value, which can be exploited by an attacker to vulnerability leads to an attack vector in MITM.