Genixcms: >> Genixcms >> 1.1.4 Security Vulnerabilities
In GeniXCMS 1.1.4, /inc/lib/backend/menus.control.php has XSS via the id parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-09-27
In GeniXCMS 1.1.4, /inc/lib/Control/Backend/menus.control.php has XSS via the id parameter.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-09-27
In the Install Themes page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a theme.
CVSS Score
8.8
EPSS Score
0.007
Published
2017-09-27
In the Upload Modules page in GeniXCMS 1.1.4, remote authenticated users can execute arbitrary PHP code via a .php file in a ZIP archive of a module.
CVSS Score
8.8
EPSS Score
0.008
Published
2017-09-27
In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.
CVSS Score
6.1
EPSS Score
0.002
Published
2017-09-27