In MiniCMS V1.10, stored XSS was found in mc-admin/conf.php (comment box), which can be used to get a user's cookie.

Published Jul 5, 2019 · Updated Aug 4, 2024 · Assigned by mitre