Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 11:54 p.m.•42 views

CVE-2022-43121

A cross-site scripting XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field...

6.1CVSS5.7AI score0.0063EPSS
SaveExploits1References1
Veracode
Veracode
•added 2022/11/10 3:28 a.m.•30 views

Cross-Site Scripting (XSS)

intelliants/subrion is vulnerable to cross-site scripting. The vulnerability exists due to lack of sanitization in admin-controllable input caused by the assignValues function of fields.php, which allows an attacker to inject and execute malicious HTML and script code into the web site via the...

6.1CVSS6.1AI score0.0063EPSS
SaveExploits1References2Affected Software1
Prion
Prion
•added 2022/11/09 4:15 p.m.•34 views

Cross site scripting

A cross-site scripting XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field...

5.8CVSS5.9AI score0.0063EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/09 12:00 a.m.•24 views

PT-2022-26763 · Intelliants · Intelliants Subrion Cms

Name of the Vulnerable Software and Affected Versions: Intelliants Subrion CMS version 4.2.1 Description: A cross-site scripting XSS issue in the CMS Field Add page allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field. This enables...

6.1CVSS6.1AI score0.0063EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/09 12:00 a.m.•8 views

CVE-2022-43121: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field...

6.1CVSS6.1AI score0.0063EPSS
SaveExploits1References3
Mend
Mend
•added 2022/11/09 12:00 a.m.•6 views

CVE-2022-43121

A cross-site scripting XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field...

6.1CVSS0.0063EPSS
SaveExploits1References4
osv_cve
osv_cve
•added 2022/11/09 12:00 a.m.•33 views

CVE-2022-43121

A cross-site scripting XSS vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field...

6.1CVSS5.9AI score
SaveExploits0References3
Rows per page
Query Builder