Lucene search
Veracode Vulnerability DatabaseVERACODE:7980HistoryDec 05, 2018 - 7:36 a.m.
Cross-Site Scripting (XSS)
2018-12-0507:36:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
25.0%
intelliants/subrion CMS is vulnerable to cross-site scripting. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Site Title parameter in panel/configuration/general, to steal session tokens or perform unwanted action on behalf of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| intelliants/subrion | le | 4.2.1 |
Related
cvelist
cvelist
CVE-2018-16631
2018-12-04 16:00:00
nvd
nvd
CVE-2018-16631
2018-12-04 16:29:00
cve
cve
CVE-2018-16631
2018-12-04 16:29:00
osv
osv
CVE-2018-16631
2018-12-04 16:29:00
prion
prion
Design/Logic Flaw
2018-12-04 16:29:00