CVE-2017-8780: Genixcms

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

GeniXCMS 1.0.2 has XSS triggered by a comment that is mishandled during a publish operation by an administrator, as demonstrated by a malformed P element.

Affected products

• Genixcms Genixcms: version 1.0.2 only

Published 2017-05-04. Last modified 2026-06-17.