medium6.1
CVE-2018-15678
An issue was discovered in BTITeam XBTIT 2.5.4.
Impact
An issue was discovered in BTITeam XBTIT 2.5.4. The "act" parameter in the sign-up page available at /index.php?page=signup is vulnerable to reflected cross-site scripting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Btiteam | Xbtit | Version 2.5.4 |