The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator...
6.1CVSS5.8AI score0.00652EPSS
SaveExploits1References1
NVD•added 2017/11/20 7:29 p.m.•32 views
CVE-2017-16904
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator...
