Lucene search
GoogleOSV:GHSA-XVGX-668J-F67PHistoryMay 24, 2022 - 5:17 p.m.
Subrion CMS XSS
2022-05-2417:17:57
Google
osv.dev
2
subrion cms
xss
security
remote attacker
javascript code
output encoding
EPSS
0.001
Percentile
50.0%
An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user’s browser without proper output encoding.
Related
cvelist
cvelist
CVE-2019-20389
2020-05-15 17:02:59
github
github
Subrion CMS XSS
2022-05-24 17:17:57
cve
cve
CVE-2019-20389
2020-05-15 18:15:13
packetstorm
packetstorm
Subrion CMS 4.2.1 Cross Site Scripting
2020-05-14 00:00:00
nvd
nvd
CVE-2019-20389
2020-05-15 18:15:13
osv
osv
CVE-2019-20389
2020-05-15 18:15:13
veracode
veracode
Cross-site Scripting (XSS)
2020-05-18 08:30:56
prion
prion
Cross site scripting
2020-05-15 18:15:00