Multiple cross-site scripting (XSS) vulnerabilities in the user forms in GeniXCMS through 0.0.8 allow remote attackers to inject arbitrary web script or HTML via crafted parameters.
{
"unresolved_ranges": [
{
"extracted_events": [
{
"last_affected": "0.0.8"
}
],
"source": "CPE_RANGE",
"vendor_product": "metalgenix:genixcms",
"cpes": [
"cpe:2.3:a:metalgenix:genixcms:*:*:*:*:*:*:*:*"
]
}
]
}