VDB
Sign up
MEDIUM6.1

GHSA-3c7g-p9jx-8cgm

GeniXCMS Cross-site Scripting (XSS) via the Menu ID field

Details

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/genix/cms

No fixed version published yet for genix/cms (composer). Pin to a known-safe version or switch to an alternative.

References