CVE-2017-13778

Fiyo CMS 2.0.7 contains a Cross-Site Scripting (XSS) vulnerability in dapur/apps/app_config/sys_config.php via the site_name parameter. The root cause is improper sanitization of the site_name input, allowing arbitrary web script or HTML to be injected into pages served by the application. This a...