Posted by Himanshu Mehta on Feb 22

*1. Introduction*

Affected Product: Fiyo CMS 2.0.2.1
Fixed in: Fiyo CMS 2.0.6
Fixed Version Link:
http://www.fiyo.org/blog/versi-2-0-6-banyak-perubahan-untuk-stabilitas
Vendor Website: http://www.fiyo.org/
Vulnerability Type: Persistent XSS
Remote Exploitable: Yes
Reported to vendor: 28/12/2015
Fixed by Vendor: 15/01/2016
CVE:

*2. Overview*

There are multiple persistent XSS vulnerabilities in Fiyo CMS…