Subrion CMS Stored Cross-site Scripting (XSS)

2022-05-1402:00:53

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.0%

JSON

_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.

CPENameOperatorVersion
intelliants/subrioneq4.0.2
intelliants/subrioneq4.1.5
intelliants/subrioneq4.0.5
intelliants/subrioneq4.1.3
intelliants/subrioneq4.1.1
intelliants/subrioneq4.2.0
intelliants/subrioneq4.2.1
intelliants/subrioneq4.1.2
intelliants/subrioneq4.0.1
intelliants/subrioneq4.0.0

Name	Operator	Version
intelliants/subrion	eq	4.0.2
intelliants/subrion	eq	4.1.5
intelliants/subrion	eq	4.0.5
intelliants/subrion	eq	4.1.3
intelliants/subrion	eq	4.1.1
intelliants/subrion	eq	4.2.0
intelliants/subrion	eq	4.2.1
intelliants/subrion	eq	4.1.2
intelliants/subrion	eq	4.0.1
intelliants/subrion	eq	4.0.0