CVE-2017-9251

andrzuk/FineCMS through 2017-05-28 is vulnerable to a reflected XSS in the sitename parameter to admin.php.

Date published : 2017-05-28

http://sebao.me/index.php/post/13.html