Intelliants: Security Vulnerabilities
An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.
CVSS Score
5.4
EPSS Score
0.002
Published
2022-06-11
A cross-site scripting (XSS) vulnerability exists in the "contact us" plugin for Subrion CMS <= 4.2.1 version via "List of subjects".
CVSS Score
5.4
EPSS Score
0.002
Published
2022-04-29
A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().
CVSS Score
8.8
EPSS Score
0.007
Published
2022-04-04
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.
CVSS Score
6.1
EPSS Score
0.067
Published
2022-03-04
Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.
CVSS Score
6.1
EPSS Score
0.016
Published
2022-03-04
Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.
CVSS Score
8.8
EPSS Score
0.016
Published
2022-03-04
A Cross Site Scripting (XSS) vulnerability exits in Subrion CMS through 4.2.1 in the Create Page functionality of the admin Account via a SGV file.
CVSS Score
4.8
EPSS Score
0.002
Published
2022-02-24
A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.
CVSS Score
7.2
EPSS Score
0.003
Published
2021-10-08
Cross-Site Scripting (XSS) vulnerability in Subrion 4.2.1 via the title when adding a page.
CVSS Score
6.1
EPSS Score
0.002
Published
2021-08-06
Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.2 when adding a blog and then editing an image file.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-08-05