Packagist/intelliants/subrion CVE-2024-25399: medium 6.1, EPSS 0.35%
Subrion CMS vulnerable to Cross Site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.2.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-q4qh-8pxw-r48q
- https://nvd.nist.gov/vuln/detail/CVE-2024-25399
- https://cwe.mitre.org/data/definitions/79
- https://github.com/intelliants/subrion
CVE-2024-25399 · published · modified · JSON