CVE-2022-24563: Metalgenix Genixcms

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

Affected products

• Metalgenix Genixcms: version 1.1.11 only

Published 2022-03-03. Last modified 2026-06-17.