Cross-site Scripting in GeniXCMS

2022-03-0400:00:19

Google

osv.dev

0.001 Low

EPSS

Percentile

26.9%

JSON

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

CPENameOperatorVersion
genix/cmseq1.1.9
genix/cmseq1.1.11
genix/cmseq1.1.10
genix/cmseq1.1.8
genix/cmseq1.1.2
genix/cmseq1.0.0
genix/cmseq1.1.1
genix/cmseq1.1.7
genix/cmseq1.1.0
genix/cmseq1.1.5

Name	Operator	Version
genix/cms	eq	1.1.9
genix/cms	eq	1.1.11
genix/cms	eq	1.1.10
genix/cms	eq	1.1.8
genix/cms	eq	1.1.2
genix/cms	eq	1.0.0
genix/cms	eq	1.1.1
genix/cms	eq	1.1.7
genix/cms	eq	1.1.0
genix/cms	eq	1.1.5