Waimai · Waimai Super Cms · CVE-2018-18622
**Name of the Vulnerable Software and Affected Versions**
Waimai Super Cms version 20150505
**Description**
An issue was discovered that allows for XSS via the "index.php?m=public&a=doregister" endpoint, specifically through the `username` parameter.
**Recommendations**
For Waimai Super Cms version 20150505, avoid using the `username` parameter in the "index.php?m=public&a=doregister" endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.