Cross site scripting

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS...

PT-2018-12851

Name of the Vulnerable Software and Affected Versions QCMS version 3.0.1 Description An issue was discovered in the upload/System/Controller/backend/news.php file, which has a Cross-Site Scripting XSS issue. Recommendations For QCMS version 3.0.1, consider restricting access to the...