CVE-2020-35437

Subrion CMS 4.2.1 is affected by: Cross Site Scripting XSS through the avatarpath parameter in a POST request to the /core/profile/ URI...

PT-2020-17325

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue is related to Cross Site Scripting XSS through the avatarpath parameter in a POST request to the "/ core/profile/" URI. This allows for potential malicious script execution. Recommendations For...