CVE-2020-12468

Published April 29th, 2020

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

Subrion CMS 4.2.1 allows CSV injection via a phrase value within a language. This is related to phrases/add/ and languages/download/.

belong2yourself/vulnerabilities

Issues found along the way

GitHub

5