Subrion Cross-site scripting (XSS) vulnerability

MÉDIO 6.1CVE-2017-10795 · GHSA-2xv7-fwh6-x7fc · Published 02/07/2017 · updated 17/06/2026

Em resumo

CVE-2017-10795 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta intelliants/subrion, subrion (intelliants).
Chance de exploração nos próximos 30 dias (EPSS): 1.1%, maior que 66.5% das vulnerabilidades.
Correção: atualize para 4.1.6 ou posterior.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.1.6`	`4.1.6`
subrion intelliants	`= 4.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

References

nvd.nist.gov/vuln/detail/CVE-2017-10795 · ADVISORY
intelliants/subrion · WEB
intelliants/subrion · PACKAGE
securityfocus.com/bid/99378 · WEB

Mais vulnerabilidades de intelliants/subrion

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.1.6

4.1.6

subrion

intelliants

= 4.1.4

No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

Mais vulnerabilidades de intelliants/subrion

Ver tudo →