CVE-2017-11201

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-12

Description The issue allows remote authenticated admins to conduct XSS attacks by uploading an image via a route=images action in the application/core/controller/images.php file.

Recommendations For FineCMS through 2017-07-12, consider restricting image upload capabilities for authenticated admins until a fix is available. As a temporary workaround, avoid using the image upload feature via the route=images action to minimize the risk of exploitation.