漏洞描述
FineCMS through 5.0.10 contains a cross-site scripting vulnerability in controllers/api.php via the function parameter in a c=api&m=data2 request.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
lorexxar.cnhttp://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#URL-Redirector-Abuse↗lorexxar.cnhttp://lorexxar.cn/2017/07/20/FineCMS%20multi%20vulnerablity%20before%20v5.0.9/#api-php-Reflected-XSS↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2017-11629/↗github.comhttps://github.com/ARPSyndicate/kenzer-templates↗