EUVD-2019-16899

Malware in sbrugna...

Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2020-61966)

Subrion CMS is a PHP-based content management system CMS from the Subrion team. The system can be integrated into a website and supports a variety of extensions plugins and more. A cross-site scripting vulnerability exists in Subrion CMS version v4.2.1. The vulnerability stems from a lack of prop...

CVE-2019-7356

Subrion CMS v4.2.1 is affected by a cross-site scripting (XSS) vulnerability exploitable via the panel/phrases/ VALUE parameter. Root cause: lack of proper validation of client-side data in the web application. Impact: client-side JS can be injected, potentially compromising user input handling a...

PT-2020-11244

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for XSS via the panel/phrases/ endpoint, specifically through the VALUE parameter. Recommendations For Subrion CMS version 4.2.1, update to a newer version that contains a fix for this iss...

CVE-2019-7356: Improper Neutralization of Input During Web Page Generation

Subrion CMS v4.2.1 allows XSS via the panel/phrases/ VALUE parameter...