In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.

Published Jun 17, 2021 · Updated Aug 4, 2024 · Assigned by mitre