Back to Database
Status published
Medium
CVE-2017-17431
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid,...
Vulnerability Description
GeniXCMS 1.1.5 has XSS via the from, id, lang, menuid, mod, q, status, term, to, or token parameter. NOTE: this might overlap CVE-2017-14761, CVE-2017-14762, or CVE-2017-14765.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-17431
Credits & Attribution
No credits recorded in the NVD database.
More from genixcms
View All →CVE-2017-8827
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might...
Critical
9.1
CVE-2017-8780
GeniXCMS 1.0.2 has XSS triggered by a comment that is...
Medium
4.8
CVE-2017-8762
GeniXCMS 1.0.2 has XSS triggered by an authenticated user who...
Medium
5.4
CVE-2017-8388
GeniXCMS 1.0.2 allows remote attackers to bypass the alertDanger MSG_USER_EMAIL_EXIST...
Medium
5.3
CVE-2017-8377
GeniXCMS 1.0.2 has SQL Injection in inc/lib/Control/Backend/menus.control.php via the menuid...
High
8.8
Affected Vendor
genixcms
View all reports →Affected Software
genixcms
Vulnerable Versions:
1.1.5
Timeline
Official Publish:
December 5th, 2017
Last Modified:
September 16th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.