PT-2017-11816

Name of the Vulnerable Software and Affected Versions FineCMS versions prior to 2017-07-12 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the folder, id, or name parameter in the /application/lib/ajax/get image.php API endpoint...