Cross-site scripting (XSS) vulnerability in edit/showmedia.asp in doITLive CMS 2.50 and earlier allows remote attackers to inject arbitrary web script or HTML via the FILE parameter.
- http://www.bugreport.ir/?/43
- https://www.exploit-db.com/exploits/5849
No PoCs found on GitHub currently.