PT-2020-10414

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description A remote attacker can inject arbitrary JavaScript code in the vlanguage switch parameter within the "/panel/configuration/general" settings page, which is reflected back within a user's browser without...

CVE-2018-16631: Improper Neutralization of Input During Web Page Generation

Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter...

PT-2018-13658

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description The issue allows for XSS via the panel/configuration/general/ endpoint, specifically through the SITE TITLE parameter. Recommendations For Subrion CMS version 4.2.1, update the software to a version that...