EUVD-2018-8457

Malware in sbrugna...

Gxlcms Cross-Site Scripting Vulnerability

Gxlcms is an enterprise website creation system. A cross-site scripting vulnerability exists in Gxlcms version 1.0, which can be exploited by remote attackers to inject arbitrary Web script or HTML by sending PATHINFO to the file gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php...

CVE-2018-16655

Gxlcms 1.0 has XSS via the PATHINFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php...