CVE-2018-16655: Gxlcms

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Gxlcms 1.0 has XSS via the PATH_INFO to gx/lib/ThinkPHP/Tpl/ThinkException.tpl.php.

Affected products

• Gxlcms Gxlcms: version 1.0 only

Published 2018-09-07. Last modified 2026-06-17.