PHPCMS 9.6.x through 9.6.3 has XSS via the mailbox (aka E-mail) field on the personal information screen.

Published Mar 24, 2019 · Updated Aug 4, 2024 · Assigned by mitre