system
Describe <CVE-2017-15872>.
user
What is <CVE-2017-15872>?
assistant
phpwcms 1.8.9 has XSS in include/inc_tmpl/admin.edituser.tmpl.php and include/inc_tmpl/admin.newuser.tmpl.php via the username (aka new_login) field..