PT-2017-18307

Name of the Vulnerable Software and Affected Versions Craft CMS versions prior to 2.6.2976 Description The issue allows for XSS attacks due to an array returned by HttpRequestService::getSegments and getActionSegments not being zero-based, resulting from an incomplete fix for a previous security...