CVE-2019-17225: Intelliants Subrion

Medium severity, CVSS 5.4. EPSS: 1.9% chance of exploitation in the next 30 days.

Subrion 4.2.1 allows XSS via the panel/members/ Username, Full Name, or Email field, aka an "Admin Member JSON Update" issue.

Affected products

• Intelliants Subrion: version 4.2.1 only

Published 2019-10-06. Last modified 2026-06-17.