The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator...
6.1CVSS5.9AI score0.00652EPSS
SaveExploits1References1
OSV•added 2017/11/20 7:29 p.m.•14 views
CVE-2017-16904
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator...
