CVE-2015-5066

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote...

4.3 MediumPublic exploit

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) content or (2) title field in an add action in the posts page to index.php or the (3) q parameter in the posts page to index.php.

Exploit likelihood

3.73%Up 2.4 points since Feb 4, 2022

What each source reports

NVD Score used 4.3

Record: CVE-2015-5066
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-5066
Updated: 2026-11-02

EUVDEUVD-2015-5082 No score

Record: EUVD-2015-5082
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6fvr-rxw2-r84r No score

Multiple cross-site scripting (XSS) vulnerabilities in the MetalGenix GeniXCMS 0.0.3 allow remote...

Record: GHSA-6fvr-rxw2-r84r
Weakness: CWE-79
Updated: 2026-11-02

Affected products

metalgenix genixcms

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	GeniXCMS 0.0.3 - Cross-Site Scripting	2015-06-24

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-5066 is a medium vulnerability (CVSS 4.3) in Metalgenix Genixcms, published June 24, 2015. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.73%, the 89th percentile. No source names a fixed version.