medium6.1
CVE-2017-17431
GeniXCMS XSS Vulnerability
Impact
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | genix/cms | <= 1.1.5 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genixcms | Genixcms | Version 1.1.5 |