Subrion@4.2.1 Security Vulnerabilities and Issues — Subrion@4.2.1 CVE List | Vulners.com

Lucene search

K

IntelliantsSubrion4.2.1

3 matches found

CVE•added 2018/08/02 1:29 a.m.•88 views

CVE-2018-14840

uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

6.1CVSS5.8AI score0.03503EPSS

CVE•added 2018/10/02 6:29 p.m.•57 views

CVE-2018-15563

_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.

6.1CVSS5.9AI score0.0024EPSS

CVE•added 2018/09/01 10:29 p.m.•51 views

CVE-2018-16327

There is Stored XSS in Subrion 4.2.1 via the admin panel URL configuration.

4.8CVSS4.8AI score0.00219EPSS