Vulnerabilities (CVE)

Filtered by vendor Fiyo Subscribe
Filtered by product Fiyo Cms
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-35373 1 Fiyo 1 Fiyo Cms 2021-06-22 4.3 MEDIUM 6.1 MEDIUM
In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.
CVE-2018-18545 1 Fiyo 1 Fiyo Cms 2020-06-02 4.3 MEDIUM 6.1 MEDIUM
Fiyo CMS 2.0.7 has XSS via the dapur\apps\app_user\edit_user.php name parameter.
CVE-2017-13778 1 Fiyo 1 Fiyo Cms 2017-08-31 4.3 MEDIUM 6.1 MEDIUM
Fiyo CMS 2.0.7 has XSS in dapur\apps\app_config\sys_config.php via the site_name parameter.