Subrion Cross-site scripting (XSS) vulnerability

MEDIUM 6.1CVE-2017-10795 · GHSA-2xv7-fwh6-x7fc · Published 02/07/2017 · updated 17/06/2026

In short

CVE-2017-10795 is a MEDIUM (CVSS 6.1) vulnerability affecting intelliants/subrion, subrion (intelliants).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.5% of all vulnerabilities.
Fix: update to 4.1.6 or later.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.1.6`	`4.1.6`
subrion intelliants	`= 4.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

References

nvd.nist.gov/vuln/detail/CVE-2017-10795 · ADVISORY
intelliants/subrion · WEB
intelliants/subrion · PACKAGE
securityfocus.com/bid/99378 · WEB

More vulnerabilities in intelliants/subrion

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.1.6

4.1.6

subrion

intelliants

= 4.1.4

No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

More vulnerabilities in intelliants/subrion

See all →