Unrated
BigTree before 4.2.22 has XSS in the Users management page via the name or company field.
CVE-2018-10364
First seen on SecPulse
References
- advisory github.com
- patch github.com
- report github.com