Description Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter. References https://github.com/d4wner/Vulnerabilities-Report/blob/master/cell.md