CVE-2020-12469: Intelliants Subrion

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

admin/blocks.php in Subrion CMS through 4.2.1 allows PHP Object Injection (with resultant file deletion) via serialized data in the subpages value within a block to blocks/edit.

Affected products

• Intelliants Subrion: up to and including 4.2.1

Published 2020-04-29. Last modified 2026-06-17.