CVE-2017-15872

phpwcms 1.8.9 has XSS in include/inctmpl/admin.edituser.tmpl.php and include/inctmpl/admin.newuser.tmpl.php via the username aka newlogin field...

PT-2017-14252

Name of the Vulnerable Software and Affected Versions phpwcms version 1.8.9 Description The issue concerns a problem with user input validation, allowing for malicious code execution. Specifically, it affects the username field, also known as new login. This can be exploited in certain templates,...

CVE-2017-15872: Improper Neutralization of Input During Web Page Generation

phpwcms 1.8.9 has XSS in include/inctmpl/admin.edituser.tmpl.php and include/inctmpl/admin.newuser.tmpl.php via the username aka newlogin field...