subrion CMS Cross Site Scripting (XSS) vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-23761 · ADVISORY
• intelliants/subrion · PACKAGE
• subrion.org · WEB
• hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version · WEB
• hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version · Exploit
• subrion.org · Product

Weitere Schwachstellen in intelliants/subrion

• CVE-2026-12202NIEDRIG 2.4A vulnerability has been found in Intelliants Subrion CMS up to 4.0.3. Affected by this issue is some unknown functionality of the component…
• CVE-2025-70958MITTEL 6.1Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute a…
• CVE-2025-56556NIEDRIG 3.8An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query f…
• CVE-2024-25400KRITISCH 9.8Subrion CMS 4.2.1 is vulnerable to SQL Injection via ia.core.mysqli.php. NOTE: this is disputed by multiple third parties because it refers …
• CVE-2024-25399MITTEL 6.1Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.