| Package | Affected versions | Patched versions |
|---|---|---|
| phpwcms | = 1.8.9 |
phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free