Cross Site Scripting (XSS) vulnerability exists in PbootCMS v1.3.7 via the title parameter in the mod function in SingleController.php.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18456
Reference (s):
- https://github.com/Pbootcms/Pbootcms/issues/4

