Lucene search

K
cvelistMitreCVELIST:CVE-2022-43120
HistoryNov 09, 2022 - 12:00 a.m.

CVE-2022-43120

2022-11-0900:00:00
mitre
www.cve.org
2
cross-site scripting
subrion cms
arbitrary code execution
crafted payload
field injection

EPSS

0.001

Percentile

40.2%

A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.

EPSS

0.001

Percentile

40.2%

Related for CVELIST:CVE-2022-43120