Subrion CMS Cross-site scripting in search

MITTEL 4.3CVE-2014-9120 · GHSA-xjr9-2wf2-3v4w · Published 10/12/2014 · updated 17/06/2026

Kurz gesagt

CVE-2014-9120 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in intelliants/subrion, subrion (intelliants).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.99%, höher als bei 62.5% aller Schwachstellen.
Abhilfe: auf 3.2.3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 3.2.3`	`3.2.3`
subrion intelliants	`≤ 3.2.2`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

References

nvd.nist.gov/vuln/detail/CVE-2014-9120 · ADVISORY
netsparker.com/xss-vulnerability-in-subrion-cms · WEB
dev.subrion.org/versions/130 · WEB
netsparker.com/xss-vulnerability-in-subrion-cms · Third Party Advisory

Weitere Schwachstellen in intelliants/subrion

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 3.2.3

3.2.3

subrion

intelliants

≤ 3.2.2

No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

Weitere Schwachstellen in intelliants/subrion

Alle anzeigen →