CVE-2018-7547
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.
Published: 2018-02-27 · CVSS: Unscored
lyadmin 1.x has XSS via the config[WEB_SITE_TITLE] parameter to the /admin.php?s=/admin/config/groupsave.html URI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7