VYPR
High severity8.8NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026

CVE-2017-6069

CVE-2017-6069

Description

Subrion CMS 4.0.5 has CSRF in admin/blog/add/. The attacker can add any tag, and can optionally insert XSS via the tags parameter.

Affected products

2

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.