CVE-2017-9252
andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action.
Published: 2017-05-28 · CVSS: Unscored
andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the search page via the text-search parameter to index.php in a route=search action.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7