CVE-2020-18325
MediumCVSS 6.1Exploitation Probability (EPSS)
Elevated risk73th percentile - higher than 73% of all known CVEs
Summary
Multiple Cross Site Scripting (XSS) vulnerabilities were found in the Configuration panel of Intelliants Subrion CMS v4.2.1. This allows an attacker to inject malicious JavaScript code that can be executed in the administrator's browser.
Risk Assessment
The risk includes potential session hijacking, credential theft, or unauthorized actions in the admin panel, which could lead to full compromise of the CMS system.
Recommendation
Immediately update Subrion CMS to the latest available version containing security fixes. If updating is not possible, restrict access to the Configuration panel to trusted IP addresses and apply input filtering.
Original NVD description (English source)
Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.