Количество 2
Количество 2
CVE-2019-20389
больше 5 лет назад
An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's browser without proper output encoding.
CVSS3: 6.1
EPSS: Низкий
GHSA-xvgx-668j-f67p
больше 3 лет назад
Subrion CMS XSS
CVSS3: 6.1
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2019-20389 An XSS issue was identified on the Subrion CMS 4.2.1 /panel/configuration/general settings page. A remote attacker can inject arbitrary JavaScript code in the v[language_switch] parameter (within multipart/form-data), which is reflected back within a user's browser without proper output encoding. | CVSS3: 6.1 | 0% Низкий | больше 5 лет назад |
| GHSA-xvgx-668j-f67p Subrion CMS XSS | CVSS3: 6.1 | 0% Низкий | больше 3 лет назад |
Уязвимостей на страницу
20