CVE-2017-16866

dayrui FineCms 5.2.0 before 2017.11.16 has Cross Site Scripting (XSS) in core/M_Controller.php via the DR_URI field.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-11-16

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Finecms (Finecms)

References

• https://gitee.com/dayrui/finecms/commit/09d4f3c1a1b8598ce8967e158b16b9fe44936c50