GHSA-jvq4-cgfw-jgf4

Source

https://github.com/advisories/GHSA-jvq4-cgfw-jgf4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/06/GHSA-jvq4-cgfw-jgf4/GHSA-jvq4-cgfw-jgf4.json

Aliases

• CVE-2021-41502

Published

2022-06-12T00:00:44Z

Modified

2023-11-08T04:06:59.468617Z

Details

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.

References

• https://nvd.nist.gov/vuln/detail/CVE-2021-41502
• https://github.com/intelliants/subrion/issues/885
• https://github.com/intelliants/subrion