CVE-2022-37059
published 2022-08-29CVE-2022-37059: Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field
PriorityP416medium4.8CVSS 3.1
AVNACLPRHUIRSCCLILAN
EPSS
0.48%
37.8th percentile
Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| intelliants | subrion | 0 – 4.2.1 | — |
| intelliants | subrion_cms | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
osv·2022-08-29
CVE-2022-37059 [MEDIUM] Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting (XSS) in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field.
GHSA
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
ghsa·2022-08-29
CVE-2022-37059 [MEDIUM] CWE-79 Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Subrion CMS 4.2.1 vulnerable to cross-site scripting in admin panel
Cross Site Scripting (XSS) in the Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via the Login Field.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-08-29
Published