CVE-2019-17610

HongCMS 3.0.0 has XSS via the install/index.php dbpassword parameter...

CVE-2019-17610

CVE-2019-17610 affects HongCMS 3.0.0 with a cross-site scripting (XSS) vulnerability in the install/index.php dbpassword parameter. The root cause is a lack of proper input validation or encoding for the dbpassword field, enabling injection of malicious script when data is reflected in the page. ...