CVE-2017-5515

2017-01-1709:59:00

Google

osv.dev

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

30.8%

JSON

Cross-site scripting (XSS) vulnerability in the user prompt function in GeniXCMS through 0.0.8 allows remote authenticated users to inject arbitrary web script or HTML via tag names.

References

www.securityfocus.com/bid/95623

github.com/semplon/GeniXCMS/issues/63