CVE-2019-10027

PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox aka E-mail field on the personal information screen...

CVE-2019-10027

PHPCMS 9.6.x–9.6.3 is affected by a cross-site scripting (XSS) vulnerability in the mailbox (E-mail) field on the personal information screen. The root cause is described as XSS, but the provided documents do not specify the exact vulnerable code path, affected components, or versions beyond 9.6....