Lucene search
FiyoFiyo Cms2.0.6.1
2 matches found
CVE-2017-6823
Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.
8.8CVSS8.4AI score0.06845EPSS
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
6.1CVSS6AI score0.00334EPSS