CVE-2017-6511

2017-03-0719:00:00

mitre

www.cve.org

finecms

2017-03-06

reflected xss

EPSS

0.001

Percentile

33.8%

JSON

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.

References

github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0

github.com/andrzuk/FineCMS/issues/2

EPSS

0.001

Percentile

33.8%

JSON

Related for CVELIST:CVE-2017-6511