4 matches found
CVE-2020-23761
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
6.1CVSS6.3AI score0.01009EPSS
SaveExploits1
CVE-2020-23761
Cross Site Scripting XSS vulnerability in subrion CMS Version = 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab...
6.1CVSS6.3AI score0.01009EPSS
SaveExploits1References2
CVE-2020-23761
Subrion CMS contains a Cross Site Scripting (XSS) vulnerability in versions up to 4.2.1, exploitable via the “payment gateway” field on the Transactions tab. The issue is a client‑side scripting flaw that can be triggered by crafted input and could lead to arbitrary script execution in the contex...
6.1CVSS6AI score0.01009EPSS
SaveExploits1References2Affected Software1
20