FineCMS Cross-Site Scripting Vulnerability (CNVD-2017-10157)

FineCMS is a content management system CMS developed using MVC architecture and PDO database interface. A cross-site scripting vulnerability exists in the search page in FineCMS versions 2017-05-28 and earlier. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTM...