WBCE 'begriff' Cross-Site Scripting Vulnerability

WBCE is an open source content management system CMS developed using PHP/MySQL. A cross-site scripting vulnerability exists in WBCE version 1.1.11. A remote attacker can exploit this vulnerability to obtain or tamper with information with the help of the 'begriff' POST parameter in...

CVE-2017-1000213

WBCE v1.1.11 is vulnerable to reflected XSS via the "begriff" POST parameter in /admin/admintools/tool.php?tool=usersearch...