GeniXCMS 1.0.2 has XSS triggered by an authenticated user who submits a page, as demonstrated by a crafted oncut attribute in a B element.
References
Link | Resource |
---|---|
https://github.com/semplon/GeniXCMS/issues/73 | Issue Tracking Patch Third Party Advisory |
Configurations
Information
Published : 2017-05-03 15:59
Updated : 2017-05-12 08:30
NVD link : CVE-2017-8762
Mitre link : CVE-2017-8762
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
genixcms
- genixcms