Subrion Cross-site scripting (XSS) vulnerability

中危 6.1CVE-2017-10795 · GHSA-2xv7-fwh6-x7fc · Published 02/07/2017 · updated 17/06/2026

要点

CVE-2017-10795 是影响 intelliants/subrion, subrion (intelliants) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：1.1%，高于 66.5% 的漏洞。
修复：升级到 4.1.6 或更高版本。

Package	Affected versions	Patched versions
intelliants/subrion Packagist	`< 4.1.6`	`4.1.6`
subrion intelliants	`= 4.1.4`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

References

nvd.nist.gov/vuln/detail/CVE-2017-10795 · ADVISORY
intelliants/subrion · WEB
intelliants/subrion · PACKAGE
securityfocus.com/bid/99378 · WEB

intelliants/subrion 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

intelliants/subrion

Packagist

< 4.1.6

4.1.6

subrion

intelliants

= 4.1.4

No fix yet

Description

Cross-site scripting (XSS) vulnerability in Subrion CMS allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

NVD description

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

intelliants/subrion 的其他漏洞

查看全部 →