CVE-2018-1000841

CVE-2018-1000841 affects Zend.To prior to version 5.15-1 with a Cross Site Scripting (XSS) vulnerability in verify.php. The issue allows an attacker to execute arbitrary JavaScript in the victim’s browser, exploitable via HTTP POST. The vulnerability is reported as fixed in version 5.16-1 Beta. M...