CVE-2020-18456

Cross Site Scripting XSS vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php...

CVE-2020-18456

CVE-2020-18456 affects PbootCMS v1.3.7, with a Cross Site Scripting (XSS) flaw exploitable via the title parameter in the mod function of SingleController.php. The root cause is improper handling of input in that function, allowing script injection that can affect users viewing crafted pages. Doc...