CVE-2021-41502

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by…

published June 11, 2022

CVSS
—
EPSS
1%
Percentile
45.5
In the wild
Unconfirmed
What it is

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00553 · 45.5th percentile
Published
2022-06-11T13:55Z
EPSS history
Timeline
  • 11 JUN 13:55Z
    An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by…
    cvelistv5