CVE-2026-12202
1 advisory.
Packagist/intelliants/subrion CVE-2026-12202: low 2.4, EPSS 0.21%
Subrion CMS vulnerable to Cross-site Scripting
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.0.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-wrcg-234w-hfhq
- https://nvd.nist.gov/vuln/detail/CVE-2026-12202
- https://github.com/intelliants/subrion
- https://hackmd.io/@noka/B1sue5Xkzl
- https://karinagante.github.io/cve-2026-12202
- https://karinagante.github.io/cve-2026-12202/#proof-of-concept-poc
- https://vuldb.com/cve/CVE-2026-12202
- https://vuldb.com/submit/830013
- https://vuldb.com/vuln/370845
- https://vuldb.com/vuln/370845/cti
CVE-2026-12202 · published · modified · JSON