PT-2018-14417

Name of the Vulnerable Software and Affected Versions nc-cms versions prior to 2017-03-10 Description An issue was discovered that allows XSS via the name parameter in the "index.php?action=edit html" endpoint. This is demonstrated by a value beginning with 'home content' and containing a crafted...