Lucene search
+L

4 matches found

OSV
OSV
•added 2022/04/30 12:00 a.m.•37 views

GHSA-JV64-2M3X-6V4Q Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

4.8CVSS5.2AI score0.00487EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/04/30 12:00 a.m.•48 views

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

A cross-site scripting XSS vulnerability exists in the contact us plugin for Subrion CMS = 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel...

5.4CVSS4AI score0.00487EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2022/04/29 2:15 p.m.•29 views

CVE-2021-41948

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

5.4CVSS0.00487EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/29 12:00 a.m.•3 views

CVE-2021-41948: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability exists in the "contact us" plugin for Subrion CMS = 4.2.1 version via "List of subjects"...

5.4CVSS5.8AI score0.00487EPSS
SaveExploits1References2
Rows per page
Query Builder