CVE-2018-12272中 6.1xowl/request.php in Ximdex 4.0 has XSS via the content parameter.
CVE-2018-12047中 6.1xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through…
CVE-2018-11735中 6.1index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.