CVE-2017-11583: Finecms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

dayrui FineCms 5.0.9 has SQL Injection via the catid parameter in an action=related request to libraries/Template.php.

Affected products

• Finecms Finecms: up to and including 5.0.9

Published 2017-07-24. Last modified 2026-06-17.