CVE-2017-6509: Burgundy-CMS Project Burgundy-CMS

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Smith0r/burgundy-cms before 2017-03-06 is vulnerable to a reflected XSS in admin/components/menu/views/menuitems.php (id parameter).

Affected products

• Burgundy-CMS Project Burgundy-CMS: up to and including 2017-02-20

Published 2017-03-07. Last modified 2026-06-17.