Subrion Cross-site scripting (XSS) vulnerability

MOYENNE 6.1CVE-2017-10795 · GHSA-2xv7-fwh6-x7fc · Published 02/07/2017 · updated 17/06/2026

En bref

CVE-2017-10795 est une vulnérabilité MOYENNE (CVSS 6.1) touchant intelliants/subrion, subrion (intelliants).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 66.5% des vulnérabilités.
Correctif : mettre à jour vers 4.1.6 ou plus récent.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.1.6`	`4.1.6`
subrion intelliants	`= 4.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

References

nvd.nist.gov/vuln/detail/CVE-2017-10795 · ADVISORY
intelliants/subrion · WEB
intelliants/subrion · PACKAGE
securityfocus.com/bid/99378 · WEB

Autres vulnérabilités de intelliants/subrion

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.1.6

4.1.6

subrion

intelliants

= 4.1.4

No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

Autres vulnérabilités de intelliants/subrion

Tout voir →