CVE-2019-8435: Improper Neutralization of Input During Web Page Generation

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header...