Cross site scripting

2017-09-0717:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.5%

The call_msg function in controllers/Form.php in dayrui FineCms 5.0.11 might have XSS related to the Referer HTTP header with Internet Explorer.

CPENameOperatorVersion
finecmseq5.0.11

CPE	Name	Operator	Version
	finecms	eq	5.0.11

References

bendawang.site/article/finecms-V5.0.11-multi-vulnerablity