CVE-2017-8780: Improper Neutralization of Input During Web Page Generation

GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element...

PT-2017-18521

Name of the Vulnerable Software and Affected Versions GeniXCMS version 1.0.2 Description The issue is triggered by a comment that is mishandled during a publish operation by an administrator. This can be demonstrated by a malformed P element, leading to a cross-site scripting XSS issue...