CVE-2018-12094

Dimofinf CMS 3.0.0 is affected by a reflected Cross‑Site Scripting (XSS) vulnerability in news.php, exploitable via the id parameter in GET requests. Public disclosures and exploits indicate remote attackers can inject arbitrary script/HTML, with PoCs targeting the id parameter (e.g., news.php?id...