3 matches found
CVE-2017-13778
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.
CVE-2020-35373
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
CVE-2018-18545
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.