CVE-2018-14835

CVE-2018-14835 affects Subrion CMS v4.2.1. The vulnerability is a Stored XSS caused by missing escaping/encoding in tooltip information displayed in multiple areas, enabling injected scripts to persist in affected pages. The connected documents corroborate this issue (NVD entry and various securi...