CVE-2018-10183

BigTree CMS 4.2.22 contains a cross-site scripting (XSS) vulnerability in /core/inc/lib/less.php/test/index.php triggered by echoing $_SERVER['REQUEST_URI'], demonstrated via the dir parameter in a file=charsets action. This is documented across multiple feeds (NVD/CNVD/OSV) with no provided reme...