An issue was discovered in Rincewind 0.1. There is a cross-site scripting (XSS) vulnerability involving a p=account request to index.php and another file named commonPages.php.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-14873.json"