Most severe vulnerabilities for "intelliants subrion cms" 4.2.1

Where

AND

Sort:

Intelliants Subrion CMSCSRF

Risk 77

Severity

8.8

CSRF

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Cross Site Request Forgery (CSRF) vulnerability exists in Intelliants Subrion CMS v4.2.1 via the Members administrator function, which could let a remote unauthenticated malicious user send an authorised request to victim and successfully create an arbitrary administrator user.

First published (updated )

CVE-2020-18326

Intelliants Subrion CMSSQL Injection

Risk 66

Severity

7.2

SQL Injection

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

A SQL injection vulnerability exists in Subrion CMS v4.2.1 in the visual-mode.

First published (updated )

CVE-2021-41947

Intelliants Subrion CMSXSS

Risk 28

Severity

6.1

EPSS

0.04%

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.

First published (updated )

CVE-2024-25399

Subrion Subrion CMSXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Multiple reflected Cross-site Scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allow attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.

1 / 2

Source: GitHub

First published (updated )

CVE-2025-70958

Intelliants Subrion CMSXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.

First published (updated )

CVE-2020-18325

Intelliants Subrion CMSXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.

First published (updated )

CVE-2020-18324

Intelliants Subrion CMSXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the tooltip text field.

First published (updated )

CVE-2022-43121

Intelliants Subrion CMSXSS

Risk 38

Severity

6.1

XSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Field default value text field.

First published (updated )

CVE-2022-43120

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact