CVE-2017-11179

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-11

Description The issue concerns stored XSS when modifying user information in the route=admin path and when registering a user account in the route=register path.

Recommendations For FineCMS through 2017-07-11, as a temporary workaround, consider restricting access to the route=admin and route=register paths until a fix is available. Avoid using these paths for user account modifications and registrations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.