andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php.

Published May 28, 2017 · Updated Aug 5, 2024 · Assigned by mitre