Input validation

2017-03-0719:59:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

30.2%

JSON

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.

CPENameOperatorVersion
finecmseq<= 2017210

CPE	Name	Operator	Version
	finecms	eq	<= 2017210

References

github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0

github.com/andrzuk/FineCMS/issues/2

0.001 Low

EPSS

Percentile

30.2%

JSON

Related for PRION:CVE-2017-6511