Description
Subrion CMS v4.2.1 is vulnerable to Stored XSS because of no escaping added to the tooltip information being displayed in multiple areas.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | intelliants/subrion | <= 4.2.1 | — | GHSA-c8mg-wp7h-f2pf |