{"id":"CVE-2017-6511","details":"andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflected XSS in index.php because of missing validation of the action parameter in application/classes/application.php.","modified":"2026-09-19T03:30:50.899457225Z","published":"2017-03-07T19:59:00.143Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"last_affected":"2017-02-10"}],"source":"CPE_RANGE","vendor_product":"finecms_project:finecms","cpes":["cpe:2.3:a:finecms_project:finecms:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"2017-03-06"}],"source":"DESCRIPTION"}]},"references":[{"type":"FIX","url":"https://github.com/andrzuk/FineCMS/commit/2c80de96d403d4a2e81ac4c48f358bdffbe85ea0"},{"type":"EVIDENCE","url":"https://github.com/andrzuk/FineCMS/issues/2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/andrzuk/finecms","events":[{"introduced":"0"},{"fixed":"2c80de96d403d4a2e81ac4c48f358bdffbe85ea0"}],"database_specific":{"source":"REFERENCES"}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6511.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}