CVE-2017-11202

CVE-2017-11202 describes a Cross-Site Scripting (XSS) vulnerability in FineCMS versions up to 2017-07-12. This flaw allows attackers to inject malicious JavaScript into visited URLs, which is then executed when logs are viewed, affecting the finecms_project finecms product. Rated as Medium severity with a CVSS score of 6.1, the vulnerability can be exploited remotely with low attack complexity, requiring user interaction. Successful exploitation could lead to limited confidentiality and integrity impacts, but not availability. There is no evidence of active exploitation in the wild, nor are there publicly available exploit modules in Metasploit or Nuclei. While there's minimal community discussion, it has not garnered significant media attention.