Lucene search
Veracode Vulnerability DatabaseVERACODE:5165HistorySep 25, 2017 - 2:32 p.m.
Cross-site Scripting (XSS)
2017-09-2514:32:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
38.0%
genix/cms is vulnerable to cross-site scripting (XSS) attacks. The library does not properly sanitize the id field in inc/lib/Control/Backend/menus.control.php, allowing a malicious user to inject and execute arbitrary web script.
Related
cve
cve
CVE-2017-14762
2017-09-27 08:29:00
CVE-2017-17431
2022-10-03 16:23:19
osv
osv
CVE-2017-14762
2017-09-27 08:29:00
GeniXCMS Cross-site Scripting (XSS) via id parameter
2022-05-17 00:36:06
CVE-2017-17431
2017-12-05 21:29:00
prion
prion
Design/Logic Flaw
2017-09-27 08:29:00
Code injection
2017-12-05 21:29:00
cvelist
cvelist
CVE-2017-14762
2017-09-27 08:00:00
CVE-2017-17431
2022-10-03 16:23:19
github
github
GeniXCMS Cross-site Scripting (XSS) via id parameter
2022-05-17 00:36:06
GeniXCMS XSS Vulnerability
2022-05-17 00:11:38
nvd
nvd
CVE-2017-14762
2017-09-27 08:29:00
CVE-2017-17431
2017-12-05 21:29:00