CVE-2017-8780: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element...