{"action":"No fix published. Pin and monitor.","affected":[],"component":"genix/cms","cve_ids":["CVE-2017-14762"],"ecosystem":"Packagist","epss":0.00683,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jgc6-jr94-h442","id":"tcs_01M5KF4J7Y5E4F5SXMTDV36XQK","modified_at":"2024-04-25T21:57:34.776158Z","published_at":"2022-05-17T00:36:06Z","references":["https://osv.dev/vulnerability/GHSA-jgc6-jr94-h442","https://nvd.nist.gov/vuln/detail/CVE-2017-14762","https://github.com/GeniXCMS/GeniXCMS","http://ph0rse.me/2017/09/21/GeniXCMS-1-1-4%E6%9C%80%E6%96%B0%E7%89%88%E6%9C%AC-getshell"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-jgc6-jr94-h442","url":"https://osv.dev/vulnerability/GHSA-jgc6-jr94-h442"}],"summary":"GeniXCMS Cross-site Scripting (XSS) via id parameter"}