Subrion CMS Cross-site Scripting vulnerability in /panel/languages

MÉDIO 5.4CVE-2023-43828 · GHSA-4w2j-wj9q-6wpx · Published 27/09/2023 · updated 17/06/2026

Em resumo

CVE-2023-43828 é uma vulnerabilidade MÉDIO (CVSS 5.4) que afeta intelliants/subrion, subrion (intelliants).
Chance de exploração nos próximos 30 dias (EPSS): 0.59%, maior que 48.2% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`≤ 4.2.1`	No fix yet
subrion intelliants	`= 4.2.1`	No fix yet

Description

A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.

NVD description

A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.

References

nvd.nist.gov/vuln/detail/CVE-2023-43828 · ADVISORY
al3zx/xss_languages_subrion_4.2.1 · WEB
intelliants/subrion · PACKAGE

Mais vulnerabilidades de intelliants/subrion

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

≤ 4.2.1

No fix yet

subrion

intelliants

= 4.2.1

No fix yet

Description

A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.

NVD description

A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into 'Title' parameter.

Mais vulnerabilidades de intelliants/subrion

Ver tudo →