CVE-2017-14765: Improper Neutralization of Input During Web Page Generation

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request...