CVE-2015-1603

Adminsystems CMS is affected by multiple XSS flaws in versions before 4.0.2, exploitable via the page parameter to index.php or the id parameter in a users_users action to asys/site/system.php. The CVE-2015-1603 entry corresponds to these XSS issues (CVSSv2 base 4.3, Medium). Remediation is to up...