CVE-2017-6511 andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.
MediumCVSS 6.1
EPSS 0.73%
- Published
- Updated
- Exploit status
- No public exploit known
Description
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| finecms project finecms | <= 2017-02-10 | No fix listed |
References
- github.com patch third-party-advisory
- github.com exploit third-party-advisory