CVE-2017-17431 GeniXCMS XSS Vulnerability
MediumCVSS 6.1
EPSS 0.68%
- Published
- Updated
- Exploit status
- No public exploit known
Description
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| genix/cms(Packagist) | <= 1.1.5 | No fix listed |
| genix/cms(Packagist) | = 1.0.0 | No fix listed |
| genix/cms(Packagist) | = 1.1.0 | No fix listed |
| genix/cms(Packagist) | = 1.1.1 | No fix listed |
| genix/cms(Packagist) | = 1.1.2 | No fix listed |
| genix/cms(Packagist) | = 1.1.3 | No fix listed |
| genix/cms(Packagist) | = 1.1.4 | No fix listed |
| genix/cms(Packagist) | = 1.1.5 | No fix listed |
| genixcms | = 1.1.5 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- code610.blogspot.com exploit third-party-advisory
- github.com product
- github.com