CVE-2017-7387

TheFirstQuestion/HelpMeWatchWho before 2017-03-28 is vulnerable to a reflected XSS in HelpMeWatchWho-master/unaired.php (episodeID parameter).

Date published : 2017-03-31

http://www.securityfocus.com/bid/97309

https://github.com/TheFirstQuestion/HelpMeWatchWho/issues/1