Cross-site Scripting in GeniXCMS

中危 5.4CVE-2022-24563 · GHSA-5mwx-f6w6-7w5r · Published 03/03/2022 · updated 17/06/2026

要点

CVE-2022-24563 是影响 genix/cms, genixcms (metalgenix) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.88%，高于 59.2% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
genix/cms Packagist	`≤ 1.1.11`	No fix yet
genixcms metalgenix	`= 1.1.11`	No fix yet

Description

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

NVD description

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

References

nvd.nist.gov/vuln/detail/CVE-2022-24563 · ADVISORY
genix.me · WEB
semplon/GeniXCMS · PACKAGE
truonghuuphuc/CVE · WEB
truonghuuphuc/CVE · WEB
genix.me · Product

genix/cms 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

genix/cms

Packagist

≤ 1.1.11

No fix yet

genixcms

metalgenix

= 1.1.11

No fix yet

Description

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

NVD description

In Genixcms v1.1.11, a stored Cross-Site Scripting (XSS) vulnerability exists in /gxadmin/index.php?page=themes&view=options" via the intro_title and intro_image parameters.

genix/cms 的其他漏洞

查看全部 →