CVE-2021-41502: Intelliants Subrion CMS

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, closing the html tag, or adding the onerror attribute.

Affected products

• Intelliants Subrion CMS: version 4.2.1 only

Published 2022-06-11. Last modified 2026-06-17.