CVE-2019-6243

Frog CMS 0.9.5 allows XSS via the forgot password page aka the /admin/?/login/forgot URI...

CVE-2019-6243

CVE-2019-6243 affects Frog CMS 0.9.5 with a cross-site scripting (XSS) vulnerability exposed via the forgot password page (the /admin/?/login/forgot URI). The issue is confirmed across multiple sources (NVD entry and CNVD/CVEs references) and is limited to input handling on the forgot-password fl...