GeniXCMS 1.1.5 has XSS via the dbuser or dbhost parameter during step 1 of installation.
metalgenix genixcms 1.1.5