medium6.1Public exploit code
CVE-2020-35437
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Subrion CMS 4.2.1 - 'avatar[path]' XSS2021-01-04 · webapps · php
Impact
Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intelliants | Subrion Cms | Version 4.2.1 |