Unrated
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter.
CVE-2018-19091
First seen on SecPulse
References
- report github.com