GHSA-9jjm-mc56-3qxv
Subrion CMS vulnerable to cross-site scripting
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | intelliants/subrion | <= 4.2.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Multiple reflected Cross-site Scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allow attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.
References
External links from the advisory. They lead to third-party sites.