CVE-2020-23989

NeDi 1.9C allows pwsec.php oid XSS.