CVE-2014-4032: Fiyo CMS

Medium severity, CVSS 4.3. EPSS: 1.9% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in apps/app_comment/form_comment.php in Fiyo CMS 1.5.7 allows remote attackers to inject arbitrary web script or HTML via the Nama field.

Affected products

• Fiyo Fiyo CMS: version 1.5.7 only

Published 2014-06-11. Last modified 2026-06-17.