Subrion CMS Cross-site scripting in search

MÉDIO 4.3CVE-2014-9120 · GHSA-xjr9-2wf2-3v4w · Published 10/12/2014 · updated 17/06/2026

Em resumo

CVE-2014-9120 é uma vulnerabilidade MÉDIO (CVSS 4.3) que afeta intelliants/subrion, subrion (intelliants).
Chance de exploração nos próximos 30 dias (EPSS): 0.99%, maior que 62.5% das vulnerabilidades.
Correção: atualize para 3.2.3 ou posterior.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 3.2.3`	`3.2.3`
subrion intelliants	`≤ 3.2.2`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

References

nvd.nist.gov/vuln/detail/CVE-2014-9120 · ADVISORY
netsparker.com/xss-vulnerability-in-subrion-cms · WEB
dev.subrion.org/versions/130 · WEB
netsparker.com/xss-vulnerability-in-subrion-cms · Third Party Advisory

Mais vulnerabilidades de intelliants/subrion

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 3.2.3

3.2.3

subrion

intelliants

≤ 3.2.2

No fix yet

Description

A cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS before 3.2.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to subrion/search/.

Mais vulnerabilidades de intelliants/subrion

Ver tudo →