CVE-2018-12626: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter...