CVE-2017-13697

controllers/member/api.php in dayrui FineCms 5.0.11 has XSS related to the dirname variable.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-08-25

Last modified

2024-09-17

Weaknesses

CWE-79

Affected products

• Finecms (Finecms Project)

References

• http://www.bendawang.site/article/The-latest-version-of-finecms-unlimited-XSS