CVE-2017-16866

dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting XSS in core/MController.php via the DRURI field...

CVE-2017-16866

CVE-2017-16866 affects dayrui FineCms 5.2.0 prior to 2017-11-16. The vulnerability is a Cross-Site Scripting (XSS) in the code path core/M_Controller.php via the DR_URI field. The connected documents confirm the affected product/component and the root cause (injection in DR_URI leading to XSS). N...