CVE-2019-17225

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue

published October 6, 2019

CVSS
—
EPSS
2%
Percentile
79.9
In the wild
Unconfirmed
What it is

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01938 · 79.9th percentile
Published
2019-10-06T16:46Z
EPSS history
Timeline
  • 06 OCT 16:46Z
    Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue
    cvelistv5