MEDIUM5.4

GHSA-5mwx-f6w6-7w5r

Cross-site Scripting in GeniXCMS

Details

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/genix/cms

Introduced in: 0

No fixed version published yet for genix/cms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2022-24563[ADVISORY]
https://genix.me[WEB]
https://github.com/semplon/GeniXCMS[PACKAGE]
https://github.com/truonghuuphuc/CVE[WEB]
https://github.com/truonghuuphuc/CVE/blob/main/CVE-2022-24563.pdf[WEB]