CVE-2020-12468

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

CVE-2020-12468: Undefined Security Weakness

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/...

PT-2020-13128

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for CSV injection through a phrase value within a language, related to the "phrases/add/" and "languages/download/" API endpoints. Recommendations For Subrion CMS version 4.2.1, consider...