GeniXCMS Cross-site Scripting (XSS) via id parameter

2022-05-1700:36:06

CWE-79

GitHub Advisory Database

github.com

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.5%

In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.

CPENameOperatorVersion
genix/cmseq1.1.4

CPE	Name	Operator	Version
	genix/cms	eq	1.1.4

References

ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell

github.com/advisories/GHSA-jgc6-jr94-h442

nvd.nist.gov/vuln/detail/CVE-2017-14762