GHSA-xjr9-2wf2-3v4wMedium

Subrion CMS Cross-site scripting in search

Published
May 14, 2022
Last Modified
August 16, 2023

🔗 CVE IDs covered (1)

CVE-2014-9120 →

📋 Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

🎯 Affected products1

  • composer/intelliants/subrion:< 3.2.3

🔗 References (4)