HIGH8.8

GHSA-34vw-8cjw-cwjj

GeniXCMS SQL Injection

Quick fix

GHSA-34vw-8cjw-cwjj — genix/cms: upgrade to the fixed version with the command below.

composer require genix/cms:^1.1.0

Details

GeniXCMS 1.0.2 has SQL Injection in `inc/lib/Control/Backend/menus.control.php` via the menuid parameter.

Enter the version of the package you're using.

Introduced in: 0Fixed in: 1.1.0

Fixcomposer require genix/cms:^1.1.0