CVE-2018-20806

Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).

Date published : 2019-03-15

https://github.com/lota/phamm/issues/24