CVE-2018-11735: Improper Neutralization of Input During Web Page Generation

index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter...

PT-2018-10791

Name of the Vulnerable Software and Affected Versions Ximdex version 4.0 Description The issue concerns an XSS vulnerability. It can be triggered via the "index.php?action=createaccount" endpoint, specifically through the sname or fname parameters. Recommendations For Ximdex version 4.0, consider...