CVE-2017-9332: Improper Neutralization of Input During Web Page Generation

The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...