Description
Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via the body parameter.
Unscored
CVE-2017-6002
EUVD-2017-15070GHSA-8hr2-jvxm-93mj
Subrion CMS 4.0.5.10 has CSRF in admin/blog/add/. The attacker can add any blog entry, and can optionally insert XSS into that entry via th…
Published Mar 27, 2017 · Updated Aug 5, 2024 · Assigned by mitre