PT-2020-10414

Name of the Vulnerable Software and Affected Versions Subrion CMS version 4.2.1 Description A remote attacker can inject arbitrary JavaScript code in the vlanguage switch parameter within the "/panel/configuration/general" settings page, which is reflected back within a user's browser without...