EPSS
Percentile
24.8%
intelliants/subrion is vulnerable to cross-site scripting. The vulnerability exists due to lack of validations when editing a blog entry which allows an attacker to modify the name of the uploaded images and execute arbitrary javascript.
github.com/advisories/GHSA-jvq4-cgfw-jgf4
github.com/intelliants/subrion/issues/885