2 matches found
CVE-2018-16631: Improper Neutralization of Input During Web Page Generation
Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter...
5.4CVSS5.9AI score0.00556EPSS
SaveExploits1References2
PT-2018-13658
Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for XSS via the panel/configuration/general/ endpoint, specifically through the SITE TITLE parameter. Recommendations For Subrion CMS version 4.2.1, update the software to a version that...
5.4CVSS0.00556EPSS
SaveExploits1References3
20