Reflected XSS Vulnerability in andrzuk/FineCMS (before 2017-03-06)

CVE-2017-6511 · MEDIUM Severity

AV:N/AC:M/AU:N/C:N/I:P/A:N

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.

Learn more about our Cms Pen Testing.