Subrion CMS Cross-Site Scripting Vulnerability (CNVD-2022-20164)

Subrion CMS is a PHP-based content management system (CMS) from the Subrion team. The system can be integrated into websites and supports multiple extension plugins, etc. A security vulnerability exists in Subrion CMS 4.2.1, which can be exploited by attackers via the q parameter in the Kickstart template.