TI-2011-04497 CVE-2011-5220 · GHSA-c3cp-wmgh-g889Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in…Priority LOW 24Cross-site scripting (XSS) vulnerability in templates/default/Admin/Login.html in PHP-SCMS 1.6.8 and earlier allows remote attackers to inject arbitrary web script or HTML via the lang parameter to index.php.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01878 · Published 2012-10-25 · No fix listed CWE-79