Skip to content
OpenAdvisories

Package · Packagist

intelliants/subrion

42 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-43875 Public exploit

    Subrion CMS vulnerable to Cross-site Scripting

    Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, dbname, dbuser, adminusername and adminemail.

    intelliants/subrion Packagist
  • Medium 6.1
    CVE-2020-18325 Public exploit

    Cross-site Scripting in intelliants/subrion

    Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.

    intelliants/subrion Packagist
  • Medium 6.1
    CVE-2020-18324 Public exploit

    Cross-site Scripting in Subrion CMS

    Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.

    intelliants/subrion Packagist
  • Medium 6.1
    CVE-2018-14840 Public exploit

    Subrion CMS Cross-site Scripting

    uploads/.htaccess in Subrion CMS 4.2.1 allows XSS because it does not block .html file uploads (but does block, for example, .htm file uploads).

    intelliants/subrion Packagist