subrion CMS Cross Site Scripting (XSS) vulnerability

2022-05-2417:46:56

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.6%

JSON

Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the “payment gateway” column on transactions tab.

CPENameOperatorVersion
intelliants/subrioneq4.0.2
intelliants/subrioneq4.1.5
intelliants/subrioneq4.0.5
intelliants/subrioneq4.1.3
intelliants/subrioneq4.1.1
intelliants/subrioneq4.2.0
intelliants/subrioneq4.2.1
intelliants/subrioneq4.1.2
intelliants/subrioneq4.0.1
intelliants/subrioneq4.0.0

Name	Operator	Version
intelliants/subrion	eq	4.0.2
intelliants/subrion	eq	4.1.5
intelliants/subrion	eq	4.0.5
intelliants/subrion	eq	4.1.3
intelliants/subrion	eq	4.1.1
intelliants/subrion	eq	4.2.0
intelliants/subrion	eq	4.2.1
intelliants/subrion	eq	4.1.2
intelliants/subrion	eq	4.0.1
intelliants/subrion	eq	4.0.0