Is genix/cms vulnerable?

Composer genix/cms has 18 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.

18advisories
2critical
0on CISA KEV
9no fix recorded
CVETitleSeverityCVSSAffectedFixed in
CVE-2015-3933MetalGenix GeniXCMS vulnerable to SQL Injectioncritical9.8<=0.0.3–
CVE-2017-5346GeniXCMS SQL injection vulnerabilityhigh7.2<1.0.01.0.0
CVE-2016-10096GeniXCMS SQL injection vulnerabilityhigh7.3<1.0.01.0.0
CVE-2017-8827GeniXCMS Arbitrary User Password Reset Vulnerabilitycritical9.1<1.1.21.1.2
CVE-2017-8388GeniXCMS Mailbox validation logic vulnerabilitymedium5.3<1.1.01.1.0
CVE-2017-14764GeniXCMS arbitrary PHP code executionhigh8.8=1.1.4–
CVE-2017-8377GeniXCMS SQL Injectionhigh8.8<1.1.01.1.0
CVE-2017-14763GeniXCMS arbitrary PHP code executionhigh8.8=1.1.4–
CVE-2017-14231GeniXCMS denial of service (account blockage)medium5.3<1.1.01.1.0
CVE-2022-24563Cross-site Scripting in GeniXCMSmedium5.4<=1.1.11–
CVE-2017-14761GeniXCMS Cross-site Scripting (XSS) vulnerability via id parametermedium6.1=1.1.4–
CVE-2017-14762GeniXCMS Cross-site Scripting (XSS) via id parametermedium6.1=1.1.4–
CVE-2017-14765GeniXCMS Cross-site Scripting (XSS) via the Menu ID fieldmedium6.1=1.1.4–
CVE-2017-17431GeniXCMS XSS Vulnerabilitymedium6.1<=1.1.5–
CVE-2017-8376GeniXCMS Cross-site Scripting (XSS)medium5.4<1.1.01.1.0
CVE-2017-14740GeniXCMS Cross-site scripting (XSS) vulnerabilitymedium4.8=1.1.0–
CVE-2017-8780GeniXCMS Cross-site Scriptingmedium4.8<1.1.01.1.0
CVE-2017-8762GeniXCMS Cross-site Scripting (XSS)medium5.4<1.1.11.1.1

Am I affected?

Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.

# one-time install
pip install phpwarden

# then
phpwarden deps composer.lock

Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command

Install docs   How findings are ranked
A version is vulnerable when it falls inside an affected range and below the fixed version. phpwarden applies these ranges to the exact versions in your lockfile or install, so you only see what applies to you.