CVE-2017-12139

XOOPS Core 2.5.8 has stored XSS in imagemanager.php because of missing MIME type validation in htdocs/class/uploader.php.

Date published : 2017-08-02

http://www.securityfocus.com/bid/100094

https://github.com/XOOPS/XoopsCore25/issues/524