Cross-Site Scripting (XSS)

2022-11-1007:31:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerability

injection

execution

html

script

website

EPSS

0.001

Percentile

40.2%

JSON

intelliants/subrion is vulnerable to cross site scripting. The vulnerability exists due to lack of sanitization in the admin-controllable input in fields.php which allows an attacker to inject and execute malicious HTML and script into the website via malicious payload.