Medium · 4.8 CVE-2022-37059 EUVD-2022-6618GHSA-rh4r-9689-6xw4

Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

Published Aug 29, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field

Ecosystem	Package	Affected	Fixed	Record
Packagist	intelliants/subrion	<= 4.2.1	—	GHSA-rh4r-9689-6xw4