medium6.1
CVE-2018-17870
An issue was discovered in BTITeam XBTIT 2.5.4.
Impact
An issue was discovered in BTITeam XBTIT 2.5.4. The "returnto" parameter of account_change.php is vulnerable to an open redirect, a different vulnerability than CVE-2018-15683.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Btiteam | Xbtit | Version 2.54 |