Frog CMS 0.9.5 allows XSS via the forgot password page (aka the /admin/?/login/forgot URI).

Published Jan 12, 2019 · Updated Aug 4, 2024 · Assigned by mitre