Lucene search

K
osvGoogleOSV:GHSA-VHQR-3GR2-7PX9
HistoryMay 14, 2022 - 2:00 a.m.

Subrion CMS Cross-site Scripting

2022-05-1402:00:54
Google
osv.dev
2

0.002 Low

EPSS

Percentile

55.4%

uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

0.002 Low

EPSS

Percentile

55.4%