CVE-2018-20590

Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.

Date published : 2018-12-30

https://github.com/nabby27/CMS/pull/3