CVE-2018-18622

Name of the Vulnerable Software and Affected Versions Waimai Super Cms version 20150505

Description An issue was discovered that allows for XSS via the "index.php?m=public&a=doregister" endpoint, specifically through the username parameter.

Recommendations For Waimai Super Cms version 20150505, avoid using the username parameter in the "index.php?m=public&a=doregister" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.