← Back

Finecms

finecms

Vendor: Finecms Project • 21 CVEs

CVEs (21)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Finecms Project
1Finecms
May 13, 2026
Mar 7, 2017
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.