Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:34504
HistoryMar 04, 2022 - 6:27 a.m.

Cross-site Scripting (XSS)

2022-03-0406:27:21
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12

0.001 Low

EPSS

Percentile

26.9%

genix/cms is vulnerable to cross-site scripting. An attacker is able to inject a malicious script to “/gxadmin/index.php?page=themes&view;=options” via the intro_title and intro_image parameters, causing an execution of malicious script upon user’s visit.

CPENameOperatorVersion
genix/cmseq1.1.11
genix/cmseq1.1.11

0.001 Low

EPSS

Percentile

26.9%

Related for VERACODE:34504