CVE-2017-10795: Intelliants Subrion

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in Subrion CMS 4.1.4 allows remote attackers to inject arbitrary web script or HTML via the body to blog/add/, a different vulnerability than CVE-2017-6069.

Affected products

• Intelliants Subrion: version 4.1.4 only

Published 2017-07-02. Last modified 2026-06-17.