NVD CVE-2017-6478 March 5, 2017 007admin paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).