← All advisories

Medium severity5.4OSV Advisory· Published Dec 4, 2018· Updated Jun 17, 2026

CVE-2018-16631

CVE-2018-16631

Description

Subrion CMS v4.2.1 allows XSS via the panel/configuration/general/ SITE TITLE parameter.

Affected products

3

Intelliants/Subrion CMSOSV2 versions
v4.0.0, v4.0.1, v4.0.2, …+ 1 more
- (no CPE)range: v4.0.0, v4.0.1, v4.0.2, …
- cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*
Subrion CMS/Subrion CMSllm-fuzzy
Range: =4.2.1

Patches

Vulnerability mechanics

References

1

github.com/security-breachlock/CVE-2018-16631/blob/master/Subrion_cms.pdfnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.