CVE-2017-6511

2017-03-0719:59:00

Google

osv.dev

AI Score

5.9

Confidence

High

EPSS

0.001

Percentile

33.8%

JSON

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.

References

github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0

github.com/andrzuk/FineCMS/issues/2