CVE-2018-14971

Affected software: QCMS 3.0.1. Vulnerability: Cross-site scripting (XSS) in upload/System/Controller/backend/user.php. Root cause/impact: The issue is a content/script injection vulnerability within the specified PHP file. Documents do not provide further detail on the underlying cause beyond the...