CVE-2018-15566: Improper Neutralization of Input During Web Page Generation

tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter...

PT-2018-13091

Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description The issue allows for XSS via the q parameter in the "admin.php/article/index.html" API endpoint. Recommendations For versions prior to 2017-05-25, avoid using the q parameter in the...