Lucene search

K
osvGoogleOSV:CVE-2020-35437
HistoryDec 26, 2020 - 4:15 a.m.

CVE-2020-35437

2020-12-2604:15:12
Google
osv.dev
6
subrion cms 4.2.1
cross site scripting
xss vulnerability
post request
avatar parameter

AI Score

6

Confidence

High

EPSS

0.001

Percentile

50.9%

Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.

AI Score

6

Confidence

High

EPSS

0.001

Percentile

50.9%