CVE-2016-9022

Exponent CMS before 2.6.0 has improper input validation in usersController.php.