Lucene search

K
osvGoogleOSV:GHSA-478J-MCRR-3877
HistoryMay 14, 2022 - 3:21 a.m.

GeniXCMS Cross-site scripting (XSS) vulnerability

2022-05-1403:21:09
Google
osv.dev
2

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Cross-site scripting (XSS) vulnerability in GeniXCMS 1.1.0 allows remote authenticated users to inject arbitrary web script or HTML via the Menu ID when adding a menu.

CPENameOperatorVersion
genix/cmseq1.1.0

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.1%

Related for OSV:GHSA-478J-MCRR-3877