Fiyo CMS Cross Site Scripting (CVE-2018-18545)

A cross site scripting vulnerability exists in Fiyo CMS. Successful exploitation of this vulnerability could allow the remote attacker to execute an arbitrary code on the affected system...

CVE-2018-18545

The collected records confirm CVE-2018-18545 affects Fiyo CMS 2.0.7, with a Cross‑Site Scripting (XSS) vulnerability exposed via the name parameter in the file path dapur/apps/app_user/edit_user.php. The issue is documented as an XSS path in multiple sources (e.g., NVD and CNVD/CVE mirrors) and i...