CVE-2017-14765

In GeniXCMS 1.1.4, gxadmin/index.php has XSS via the Menu ID field in a page=menus request.

Score

CVSS 3.0 6.1 Medium

Status

Modified - cve@mitre.org

Published

2017-09-27

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Genixcms (Genixcms)

References

• http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell/