CVE-2018-18545: Fiyo CMS

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.

Affected products

• Fiyo Fiyo CMS: version 2.0.7 only

Published 2018-10-21. Last modified 2026-06-17.