CVE-2020-35437: XSS
First published: Sat Dec 26 2020(Updated: )
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Intelliants Subrion CMS | =4.2.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for Subrion CMS 4.2.1?
The vulnerability ID for Subrion CMS 4.2.1 is CVE-2020-35437.
What is the severity of CVE-2020-35437?
The severity of CVE-2020-35437 is medium, with a CVSS score of 6.1.
How does CVE-2020-35437 affect Subrion CMS 4.2.1?
CVE-2020-35437 affects Subrion CMS 4.2.1 through a Cross-Site Scripting (XSS) vulnerability in the avatar[path] parameter in a POST request to the /_core/profile/ URI.
How can I fix CVE-2020-35437 in Subrion CMS 4.2.1?
To fix CVE-2020-35437 in Subrion CMS 4.2.1, it is recommended to apply the latest security patch or update provided by Intelliants, the developer of Subrion CMS.
Is there any additional information available about CVE-2020-35437?
Yes, you can find additional information about CVE-2020-35437 in the following references: [Packetstorm Security](http://packetstormsecurity.com/files/160783/Subrion-CMS-4.2.1-Cross-Site-Scripting.html) and [GitHub Issue](https://github.com/intelliants/subrion/issues/880).
- collector/nvd-index
- agent/author
- agent/severity
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/description
- agent/tags
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/intelliants
- canonical/intelliants subrion cms
- version/intelliants subrion cms/4.2.1