PT-2019-16000

Name of the Vulnerable Software and Affected Versions phpMyChat-Plus version 1.98 Description The issue concerns a reflected XSS vulnerability that can be exploited through JavaScript injection into the password reset URL. Specifically, the pmc username parameter in the pass reset.php URL is...