CVE-2015-2678: Genixcms

Medium severity, CVSS 4.3. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in MetalGenix GeniXCMS before 0.0.2 allow remote attackers to inject arbitrary web script or HTML via the (1) cat parameter in the categories page to gxadmin/index.php or (2) page parameter to index.php.

Affected products

• Genixcms Genixcms: up to and including 0.0.1

Published 2015-03-23. Last modified 2026-06-17.