PT-2019-12763

Name of the Vulnerable Software and Affected Versions EmpireCMS version 7.5.0 Description The issue allows for XSS via the from parameter to "e/member/doaction.php". This can be exploited using a CSRF payload to change the dynamic page template. An attacker can resend the...