← All advisories

Medium severity6.1NVD Advisory· Published Jun 17, 2021· Updated Jun 17, 2026

CVE-2020-35373

CVE-2020-35373

Description

In Fiyo CMS 2.0.6.1, the 'tag' parameter results in an unauthenticated XSS attack.

Affected products

3

Fiyo/FiyoCMS2 versions
cpe:2.3:a:fiyo:fiyo_cms:2.0.6.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:fiyo:fiyo_cms:2.0.6.1:*:*:*:*:*:*:*
- (no CPE)range: = 2.0.6.1
Fiyo/CMSdescription

Patches

Vulnerability mechanics

References

1

loganclaw.com/2020/12/07/fiyo-cms-reflected-xss/nvdExploitThird Party AdvisoryURL Repurposed

News mentions

0

No linked articles in our index yet.