Cross-site scripting (XSS) vulnerability in pm.php in PCXP/TOPPE CMS allows remote attackers to inject arbitrary web script or HTML via the msg variable.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pc-experience | Pc-experience | 1.15 (including) | 1.15 (including) |
| Pc-experience | Pc-experience | 2.0 (including) | 2.0 (including) |
| Toppe_cms | Toppe | * | * |