CVE-2017-10967

MEDIUM

Finecms - XSS

Title source: rule

In FineCMS before 2017-07-06, application\core\controller\config.php allows XSS in the (1) key_name, (2) key_value, and (3) meaning parameters.

CVSS v3 6.1

EPSS 0.0033

EPSS Percentile 55.5%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWE

CWE-79

Status published

Products (2)

finecms_project/finecms

n/a/n/a

Published Jul 06, 2017

Tracked Since Feb 18, 2026