CVE-2017-6511: Finecms Project Finecms

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.

Affected products

• Finecms Project Finecms: up to and including 2017-02-10

Published 2017-03-07. Last modified 2026-06-17.