Cross-Site Scripting (XSS)

genix/cms is vulnerable to cross-site scripting XSS attacks. The vulnerability exists because userform.php is getting userID data from GET requests, allowing the attacker to inject arbitrary code into the form and launch XSS attacks...