CVE-2020-18324

Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.
References
Link Resource
http://intelliants.com Broken Link
http://subrion.com Product
https://github.com/hamm0nz/CVE-2020-18324 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*

History

11 Mar 2022, 14:44

Type Values Removed Values Added
CPE cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*
CWE CWE-79
CVSS v2 : unknown
v3 : unknown
v2 : 4.3
v3 : 6.1
References (MISC) http://intelliants.com - (MISC) http://intelliants.com - Broken Link
References (MISC) http://subrion.com - (MISC) http://subrion.com - Product
References (MISC) https://github.com/hamm0nz/CVE-2020-18324 - (MISC) https://github.com/hamm0nz/CVE-2020-18324 - Exploit, Third Party Advisory

04 Mar 2022, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-03-04 15:15

Updated : 2024-02-04 22:29


NVD link : CVE-2020-18324

Mitre link : CVE-2020-18324

CVE.ORG link : CVE-2020-18324


JSON object : View

Products Affected

intelliants

  • subrion_cms
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')