Cross-site Scripting (XSS) - Reflected in slackero/phpwcms

Valid

Reported on

Aug 21st 2021

✍️ Description

Reflected xss

     'HTTP-REFERER: '.(echoempty($ref) ? 'unknown' : $ref);

xss bug

act_formmailer.php L49

We have contacted a member of the slackero/phpwcms team and are waiting to hear back 2 years ago

Oliver Georgi validated this vulnerability 2 years ago

rohit75033 has been awarded the disclosure bounty

The fix bounty is now up for grabs

Oliver Georgi marked this as fixed with commit 6876be 2 years ago

This vulnerability will not receive a CVE