Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| intelliants/subrion(Packagist) | 0 | 4.1.6 | N/A |
CVSS Metrics
