Cross-Site Scripting in Subrion CMS by Intelliants
CVE-2020-22392

5.4MEDIUM

Key Information:

Vendor

Intelliants

Status
Subrion Cms
Vendor
CVE Published:
5 August 2021

What is CVE-2020-22392?

A Cross-Site Scripting (XSS) vulnerability has been identified in Subrion CMS 4.2.2. This vulnerability arises when users add a blog and subsequently edit image files, potentially allowing attackers to inject malicious scripts. If exploited, this could lead to unauthorized actions on behalf of users or compromise sensitive information. Website administrators should apply available patches and review security configurations to mitigate this risk.

References

https://github.com/intelliants/subrion/issues/868
x_refsource_MISC

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.