CVE-2020-35437: Intelliants Subrion CMS

Medium severity, CVSS 6.1. EPSS: 3.1% chance of exploitation in the next 30 days.

Subrion CMS 4.2.1 is affected by: Cross Site Scripting (XSS) through the avatar[path] parameter in a POST request to the /_core/profile/ URI.

Affected products

• Intelliants Subrion CMS: version 4.2.1 only

Published 2020-12-26. Last modified 2026-06-17.