CVE-2022-24563

Name of the Vulnerable Software and Affected Versions Genixcms version 1.1.11

Description A stored Cross-Site Scripting (XSS) issue exists in the /gxadmin/index.php?page=themes&view=options endpoint via the intro title and intro image parameters. This allows for malicious script execution.

Recommendations For Genixcms version 1.1.11, as a temporary workaround, consider restricting access to the /gxadmin/index.php?page=themes&view=options endpoint until a patch is available. Avoid using the intro title and intro image parameters in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.