CVE-2018-17039: 1234n Minicms

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.

Affected products

• 1234n Minicms: version 1.10 only

Published 2018-09-14. Last modified 2026-06-17.