TI-2016-04192 CVE-2016-4849 · GHSA-grv6-7rhr-hvfpMultiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow…Priority LOW 30Multiple cross-site scripting (XSS) vulnerabilities in Geeklog IVYWE edition 2.1.1 allow remote attackers to inject arbitrary web script or HTML by leveraging use of the COM_getCurrentURL function in (1) public_html/layo…CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01307 · Published 2017-04-20 · No fix listed CWE-79