CVE-2018-15563

low-risk

Published 2018-10-02

_core/admin/pages/add/ in Subrion CMS 4.2.1 has XSS via the titles[en] parameter.

Do I need to act?

0.24% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 6.1/10 Medium

NETWORK / LOW complexity

Subrion

Intelliants

Third Party Advisory https://cxsecurity.com/issue/WLB-2018090261

/ 100

low-risk

Severity 23/34 · High

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal