Description
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewing by an administrator.
Unscored
CVE-2017-16904
EUVD-2017-8074GHSA-r2v3-f78q-m97c
The Public tologin feature in admin.php in LvyeCMS through 3.1 allows XSS via a crafted username that is mishandled during later log viewin…
Published Nov 20, 2017 · Updated Aug 5, 2024 · Assigned by mitre