EUVD-2017-18188

Malware in sbrugna...

CVE-2017-9252: Improper Neutralization of Input During Web Page Generation

andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action...

PT-2017-18808 · Andrzuk · Finecms

Name of the Vulnerable Software and Affected Versions: andrzuk/FineCMS versions prior to 2017-05-28 Description: The issue is related to a reflected XSS in the search page. This occurs via the text-search parameter to "index.php" in a "route=search" action. Recommendations: For versions prior to...