Security Advisory
CVE-2017-11180
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
FineCMS through 2017-07-11 has stored XSS in the logging functionality, as demonstrated by an XSS payload in (1) the User-Agent header of an HTTP request or (2) the username entered on the login screen.