Unrated
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing.
CVE-2019-7649
First seen on SecPulse
References
- report github.com