Subrion Cross-site scripting (XSS) vulnerability

MITTEL 6.1CVE-2017-10795 · GHSA-2xv7-fwh6-x7fc · Published 02/07/2017 · updated 17/06/2026

Kurz gesagt

CVE-2017-10795 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in intelliants/subrion, subrion (intelliants).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 66.5% aller Schwachstellen.
Abhilfe: auf 4.1.6 oder neuer aktualisieren.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.1.6`	`4.1.6`
subrion intelliants	`= 4.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

References

nvd.nist.gov/vuln/detail/CVE-2017-10795 · ADVISORY
intelliants/subrion · WEB
intelliants/subrion · PACKAGE
securityfocus.com/bid/99378 · WEB

Weitere Schwachstellen in intelliants/subrion

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.1.6

4.1.6

subrion

intelliants

= 4.1.4

No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

Weitere Schwachstellen in intelliants/subrion

Alle anzeigen →