2 matches found
CVE-2017-17949
Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.
CVE-2017-17948
Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.