5 matches found
GeniXCMS Cross-site Scripting (XSS)
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element...
CVE-2017-8762
CVE-2017-8762 affects GeniXCMS 1.0.2. The vulnerability is an XSS condition triggered when an authenticated user submits a page, demonstrated by a crafted oncut attribute in a B element. The Connected documents corroborate this across multiple sources (Red Hat, GHSA, OSV, CVE lists) with the same...
CVE-2017-8762
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element...
PT-2017-18511
Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is triggered by an authenticated user submitting a page, which leads to a cross-site scripting XSS attack. This can be demonstrated by a crafted oncut attribute in a B element. Recommendations For...
CVE-2017-8762: Improper Neutralization of Input During Web Page Generation
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element...