Cross site scripting (XSS) vulnerability in kfm through 1.4.7 via crafted GET request to /kfm/index.php. Date published : 2022-09-23 https://code.google.com/arc