| Package | Affected versions | Patched versions |
|---|---|---|
| intelliants/subrion | ≤ 4.2.1 | |
| subrion | ≤ 4.2.1 |
A cross-site scripting (XSS) vulnerability exists in the contact us plugin for Subrion CMS <= 4.2.1 version via List of subjects. This can be exploited by someone with administrative privileges when they log in to the admin panel.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free