VDB
Sign up
MEDIUM5.4

GHSA-52xr-wx26-9rfg

GeniXCMS Cross-site Scripting (XSS)

Quick fix

GHSA-52xr-wx26-9rfg — genix/cms: upgrade to the fixed version with the command below.

composer require genix/cms:^1.1.0

Details

GeniXCMS 1.0.2 has XSS triggered by an authenticated comment that is mishandled during a mouse operation by an administrator.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/genix/cms
Introduced in: 0Fixed in: 1.1.0
Fixcomposer require genix/cms:^1.1.0

References