~ / search / GHSA-rh4r-9689-6xw4

GHSA-rh4r-9689-6xw4

Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-37059

Packages

EcosystemPackageAffectedFixed in
Packagist intelliants/subrion <= 4.2.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Cross Site Scripting (XSS) in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field.

References

External links from the advisory. They lead to third-party sites.