PT-2019-16038

Name of the Vulnerable Software and Affected Versions Xiuno BBS version 4.0 Description The issue allows for XXE XML External Entity attacks. This is due to a vulnerability in the plugin/xn wechat public/route/token.php file. Recommendations For Xiuno BBS version 4.0, consider disabling the...