Lucene search
Veracode Vulnerability DatabaseVERACODE:7562HistoryOct 03, 2018 - 4:05 a.m.
Cross-Site Scripting (XSS)
2018-10-0304:05:20
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
EPSS
0.001
Percentile
34.7%
intelliants/subrion is vulnerable to cross-site scripting. An attacker is able to inject arbitrary Javascript into a victim’s browser via the titles[en] parameter in _core/admin/pages/add/ to steal session cookies or perform unwanted actions on behalf of the user.
References
Related
nvd
nvd
CVE-2018-15563
2018-10-02 18:29:00
cve
cve
CVE-2018-15563
2018-10-02 18:29:00
osv
osv
Subrion CMS Stored Cross-site Scripting (XSS)
2022-05-14 02:00:53
CVE-2018-15563
2018-10-02 18:29:00
prion
prion
Design/Logic Flaw
2018-10-02 18:29:00
github
github
Subrion CMS Stored Cross-site Scripting (XSS)
2022-05-14 02:00:53
cvelist
cvelist
CVE-2018-15563
2018-10-02 18:00:00