Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-41502
5.4
MEDIUMCVSS v3
Published
June 11, 2022
CVSS v2
3.5 LOW
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.
GitHub