UCMS cross-site scripting vulnerability (CNVD-2018-19933)

UCMS is a content management system written in PHP. A cross-site scripting vulnerability exists in the 'minfo' parameter of the /ucms/sadmin/aindex.php file in UCMS version 1.4.6, which can be exploited by a remote attacker to inject arbitrary Web script or HTML...