CVE-2020-23761

2021-04-0918:15:13

Google

osv.dev

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the “payment gateway” column on transactions tab.

CPENameOperatorVersion
subrioneq4.1.4
subrioneq4.0.4
subrioneq4.2.0
subrioneq4.0.2
subrioneq4.1.0
subrioneq4.0.3
subrioneq4.1.1
subrioneq4.1.2
subrioneq4.1.3
subrioneq4.2.1