CVE-2019-11406

Published May 8th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

4.3

MEDIUM

Affected

1

PROJECT

Description

Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.

intelliants/subrion

Subrion CMS - open source php content management system.

GitHub

284