medium6.1
CVE-2019-7660
An issue was discovered in PHPMyWind 5.5.
Impact
An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmywind | Phpmywind | through 5.5 |