Cross site scripting

2017-07-2400:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

38.2%

dayrui FineCms 5.0.9 has Cross Site Scripting (XSS) in admin/Login.php via a payload in the username field that does not begin with a ‘<’ character.

CPENameOperatorVersion
finecmseq5.0.9

CPE	Name	Operator	Version
	finecms	eq	5.0.9

References

lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/

0.001 Low

EPSS

Percentile

38.2%

Related for PRION:CVE-2017-11581