Cross-site Scripting (XSS)

Overview intelliants/subrion is an open source php content management system. Affected versions of this package are vulnerable to Cross-site Scripting XSS through the Blocks Endpoint component when processing the CSS class name argument. An attacker can inject and execute arbitrary scripts by...