Unrated
imcat 4.5 has Stored XSS via the root/run/adm.php fm[instop][note] parameter.
CVE-2019-8436
First seen on SecPulse
References
- report github.com