CVE-2019-20389

creationtimestamp| type| source ---|---|--- 2020-05-15 22:34:03+00:00| seen| https://t.me/cibsecurity/12116...

CVE-2019-20389

CVE-2019-20389 describes a reflected XSS in Subrion CMS 4.2.1 on the /panel/configuration/general settings page. The vulnerability occurs because the value of the multipart/form-data parameter v[language_switch] can be controlled by a remote attacker and is reflected back in the user’s browser wi...