CVE-2018-20729

Name of the Vulnerable Software and Affected Versions: NeDi versions prior to 1.7Cp3

Description: A reflected cross site scripting issue allows remote attackers to inject arbitrary web script or HTML via the reg parameter in "mh.php".

Recommendations: For versions prior to 1.7Cp3, update to version 1.7Cp3 or later to resolve the issue. As a temporary workaround, consider restricting access to the "mh.php" endpoint to minimize the risk of exploitation. Avoid using the reg parameter in the affected endpoint until the issue is resolved.