CVE-2019-8435

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header...

CVE-2019-8435

CVE-2019-8435 affects PHPMyWind v5.5, with an XSS vulnerability in admin/default.php exploitable via an HTTP Host header. The connected documents confirm the vulnerability and describe the impact as cross-site scripting, enabling arbitrary script/HTML injection when a crafted Host header is proce...