DouCo DouPHP Cross-Site Scripting Vulnerability

DouCo DouPHP is a lightweight open source CMS Content Management System based on PHP and MySQL. A cross-site scripting vulnerability exists in admin/nav.php?rec=update in DouCo DouPHP version 1.5 20181221. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML wit...

PT-2018-15435

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 20181221 Description An issue was discovered in DouCo DouPHP, where the "admin/nav.php?rec=update" endpoint has a cross-site scripting XSS issue via the nav name parameter. Recommendations For DouPHP version 1.5 20181221,...