CVE-2017-6823: Fiyo CMS

High severity, CVSS 8.8. EPSS: 8% chance of exploitation in the next 30 days.

Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.

Affected products

• Fiyo Fiyo CMS: version 2.0.6.1 only

Published 2017-03-12. Last modified 2026-06-17.