MaNGOSWebV4 cross-site scripting vulnerability (CNVD-2017-03504)

MaNGOSWeb is a World of Warcraft private server CMS. maNGOSWebV4 is one of the versions. A cross-site scripting vulnerability exists in the inc/admin/templatefiles/admin.faq.php page of MaNGOSWebV4. An attacker can exploit this vulnerability to inject arbitrary web script or HTML...