medium6.1
CVE-2020-23761
subrion CMS Cross Site Scripting (XSS) vulnerability
Impact
Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | intelliants/subrion | <= 4.2.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelliants | Subrion | through 4.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version/
- https://subrion.org/
- https://github.com/advisories/GHSA-xhc3-5pgf-p576
- https://nvd.nist.gov/vuln/detail/CVE-2020-23761
- https://subrion.org
- http://hidden-one.co.in/2021/04/09/cve-2020-23761-stored-xss-vulnerability-in-subrion-cms-version