4 matches found
CVE-2020-12468
Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...
7.8CVSS7AI score0.00858EPSS
SaveExploits1References1
CVE-2020-12468
Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...
7.8CVSS7.7AI score0.00858EPSS
SaveExploits1References1
CVE-2020-12468
Subrion CMS 4.2.1 is affected by CVE-2020-12468. The vulnerability allows CSV injection through a phrase value stored in a language, specifically related to phrases/add/ and languages/download/. The root cause is the lack of input sanitization for phrase values, enabling crafted content to be int...
7.8CVSS7.6AI score0.00858EPSS
SaveExploits1References1Affected Software1
20