CVE-2019-7649

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

PT-2019-18681

Name of the Vulnerable Software and Affected Versions CMSWing version 1.3.7 Description The issue concerns the password hashing mechanism in CMSWing, where the global.encryptPassword function in bootstrap/global.js relies on multiple MD5 operations. This could potentially lead to security...