CVE-2017-11179

FineCMS through 2017-07-11 has stored XSS in route=admin when modifying user information, and in route=register when registering a user account.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-07-12

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Finecms (Finecms Project)

References

• http://www.yuesec.com/img/cccccve/finecms_storedxss/finecms_storedxss26543.html