GitHub Advisoryadvisory · Packagist

GHSA-pwr7-j6g3-hmx6 GeniXCMS XSS Vulnerability

MEDIUM Published 2022-05-17 Modified 2023-10-31 Official page ↗
Aliases
CVE-2017-17431
Ecosystem
Packagist
Packages
genix/cms
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2023-07-27

Affected packages

• Packagist genix/cms: <= 1.1.5 (no fix yet)

Description

GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.

Related

Alias · CVE (1)

  • CVE-2017-17431 GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References