Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.

Published May 8, 2019 · Updated Aug 4, 2024 · Assigned by mitre