Security Advisory
CVE-2018-17039
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.