Description
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen.
Unscored
CVE-2017-11180
EUVD-2017-2814GHSA-xfr4-2mmh-cm5w
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of a…
Published Jul 12, 2017 · Updated Sep 16, 2024 · Assigned by mitre