The vulnerability of the DIAFAN.CMS content management system lies in insufficient validation of arguments passed in commands, allowing attackers to execute XSS attacks.

The vulnerability of the DIAFAN.CMS content management system is related to insufficient checking of arguments passed in commands. Exploitation may allow a malicious actor, operating remotely, to carry out XSS attacks by injecting specially crafted JavaScript code...