← All advisories

Medium severity6.1NVD Advisory· Published May 8, 2019· Updated Jun 17, 2026

CVE-2019-11406

CVE-2019-11406

Description

Subrion CMS 4.2.1 allows _core/en/contacts/ XSS via the name, email, or phone parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Intelliants/Subrion CMS2 versions
cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:intelliants:subrion_cms:4.2.1:*:*:*:*:*:*:*
- (no CPE)range: <4.2.1
Subrion/Subrion CMSdescription

Patches

Vulnerability mechanics

References

2

github.com/intelliants/subrion/commits/developnvdPatchThird Party Advisory
github.com/intelliants/subrion/issues/821nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.