CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

OSV•added 2018/12/04 4:29 p.m.•19 views

CVE-2018-16629

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

4.8CVSS5.7AI score0.00559EPSS

Exploits1References1

NVD•added 2018/12/04 4:29 p.m.•24 views

CVE-2018-16629

panel/uploads/elfl1XA in Subrion CMS v4.2.1 allows XSS via an SVG file with JavaScript in a SCRIPT element...

4.8CVSS4.9AI score0.00559EPSS

Exploits1References1

CVE•added 2018/12/04 4:0 p.m.•60 views

CVE-2018-16629

CVE-2018-16629 describes an XSS vulnerability in Subrion CMS v4.2.1, triggered by an SVG file containing JavaScript in a SCRIPT element uploaded to the path panel/uploads/#elf_l1_XA. The core issue is an SVG handling path that allows script execution, enabling potential arbitrary code execution w...

4.8CVSS4.7AI score0.00559EPSS

Exploits1References1Affected Software1