CVE-2018-7547

lyadmin 1.x has XSS via the configWEBSITETITLE parameter to the /admin.php?s=/admin/config/groupsave.html URI...

CVE-2018-7547

lyadmin 1.x has XSS via the configWEBSITETITLE parameter to the /admin.php?s=/admin/config/groupsave.html URI...

PT-2018-18150

Name of the Vulnerable Software and Affected Versions lyadmin versions 1.x Description The issue allows for XSS via the configWEB SITE TITLE parameter to the "/admin.php?s=/admin/config/groupsave.html" API endpoint. Recommendations For lyadmin version 1.x, update to a version that fixes this issu...