Unrated
imcat 4.4 allow XSS via a crafted cookie to the root/tools/adbug/binfo.php?cookie URI.
CVE-2018-20611
First seen on SecPulse
References
- report github.com