CVE-2020-23761: Intelliants Subrion

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Cross Site Scripting (XSS) vulnerability in subrion CMS Version <= 4.2.1 allows remote attackers to execute arbitrary web script via the "payment gateway" column on transactions tab.

Affected products

• Intelliants Subrion: up to and including 4.2.1

Published 2021-04-09. Last modified 2026-06-17.