Unrated
Exponent CMS before 2.6.0 has improper input validation in usersController.php.
CVE-2016-9022
First seen on SecPulse
References
- patch exponentcms.lighthouseapp.com
- patch github.com