KumbiaPHP Cross-Site Scripting Vulnerability

KumbiaPHP is a lightweight, BSD-licensed PHP framework. A cross-site scripting vulnerability exists in KumbiaPHP 1.1.1 and earlier versions in development mode. An attacker can exploit this vulnerability via public/pages/kumbia PATHINFO to conduct cross-site scripting attacks...