CVE-2017-20185

CVE-2017-20185 affects Fuzzy SWMP. The vulnerability lies in swmp.php’s GET Parameter Handler, where manipulating the theme argument enables cross-site scripting. Impact is client-side script execution with remote feasibility; exploitation details are publicly disclosed. Patch identifier 792bcab6...