CVE-2018-10366

The CVE-2018-10366 entry corresponds to a stored/reflected Cross-Site Scripting (XSS) in the October CMS Users plugin (rainlab-user) version 1.4.5, where the name field is susceptible to XSS. The vulnerability is tied to the front-end user management feature and is active in 1.4.5 with PoC eviden...