← All advisories

Medium severity5.4NVD Advisory· Published Oct 6, 2019· Updated Jun 17, 2026

CVE-2019-17225

CVE-2019-17225

Description

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Intelliants/Subrion CMS
cpe:2.3:a:intelliants:subrion:4.2.1:*:*:*:*:*:*:*
Subrion/Subriondescription
Subrion/Subrionllm-create
Range: =4.2.1

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/154746/Subrion-4.2.1-Cross-Site-Scripting.htmlnvdExploitThird Party Advisory
github.com/intelliants/subrion/issues/845nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.