qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPMinstallmodulesdatabase_config.php.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-19515
Reference (s):
- https://topsecalphalab.github.io/CVE/qdPM9.1-Installer-Cross-Site-Scripting

