Lucene search
Veracode Vulnerability DatabaseVERACODE:7562HistoryOct 03, 2018 - 4:05 a.m.
Cross-Site Scripting (XSS)
2018-10-0304:05:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
34.0%
intelliants/subrion is vulnerable to cross-site scripting. An attacker is able to inject arbitrary Javascript into a victim’s browser via the titles[en] parameter in _core/admin/pages/add/ to steal session cookies or perform unwanted actions on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| intelliants/subrion | eq | 4.2.1 |
References
Related
cve
cve
CVE-2018-15563
2018-10-02 18:29:00
cvelist
cvelist
CVE-2018-15563
2018-10-02 18:00:00
prion
prion
Design/Logic Flaw
2018-10-02 18:29:00
osv
osv
CVE-2018-15563
2018-10-02 18:29:00
Subrion CMS Stored Cross-site Scripting (XSS)
2022-05-14 02:00:53
github
github
Subrion CMS Stored Cross-site Scripting (XSS)
2022-05-14 02:00:53
nvd
nvd
CVE-2018-15563
2018-10-02 18:29:00