Subrion CMS Cross-site scripting in search

MOYENNE 4.3CVE-2014-9120 · GHSA-xjr9-2wf2-3v4w · Published 10/12/2014 · updated 17/06/2026

En bref

CVE-2014-9120 est une vulnérabilité MOYENNE (CVSS 4.3) touchant intelliants/subrion, subrion (intelliants).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.99%, plus élevée que 62.5% des vulnérabilités.
Correctif : mettre à jour vers 3.2.3 ou plus récent.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 3.2.3`	`3.2.3`
subrion intelliants	`≤ 3.2.2`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

References

nvd.nist.gov/vuln/detail/CVE-2014-9120 · ADVISORY
netsparker.com/xss-vulnerability-in-subrion-cms · WEB
dev.subrion.org/versions/130 · WEB
netsparker.com/xss-vulnerability-in-subrion-cms · Third Party Advisory

Autres vulnérabilités de intelliants/subrion

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 3.2.3

3.2.3

subrion

intelliants

≤ 3.2.2

No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

Autres vulnérabilités de intelliants/subrion

Tout voir →