Subrion CMS
42 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Subrion CMS, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
Subrion CMS CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 1 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 0 |
| 2026-01 | 0 |
| 2026-02 | 1 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 0 |
| 2026-06 | 1 |
| 2026-07 | 0 |
| 2026-08 | 1 |
| 2026-09 | 2 |
Severity
How the 42 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical3
- High12
- Medium25
- Low2
Latest CVEs
The 15 most recently published vulnerabilities affecting Subrion CMS.
- CVE-2026-96773Intelliants Subrion CMS Login Page login.php authorize redirect4.3
- CVE-2026-96772Intelliants Subrion CMS actions.json assign-owner information disclosure5.3
- CVE-2026-72604Intelliants Subrion CMS - Path Traversal6.5
- CVE-2026-12202Intelliants Subrion CMS Blocks Endpoint cross site scripting2.4
- CVE-2025-70958Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of the user's browser ...6.1
- CVE-2025-56556An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated...3.8
- CVE-2024-25399Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.6.1
- CVE-2023-43875Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web scripts via a crafted payload injected into the dbhost, d...6.1
- CVE-2022-43120A cross-site scripting (XSS) vulnerability in the /panel/fields/add component of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injec...6.1
- CVE-2022-43121A cross-site scripting (XSS) vulnerability in the CMS Field Add page of Intelliants Subrion CMS v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into ...6.1
- CVE-2022-37059Cross Site Scripting (XSS) in Admin Panel of Subrion CMS 4.2.1 allows attacker to inject arbitrary code via Login Field4.8
- CVE-2021-41502An issue was discovered in Subrion CMS v4.2.1 There is a stored cross-site scripting (XSS) vulnerability that can execute malicious JavaScript code by modifying the name of the uploaded image, clos...5.4
- CVE-2021-43464A Remiote Code Execution (RCE) vulnerability exiss in Subrion CMS 4.2.1 via modified code in a background field; when the information is modified, the data in it will be executed through eval().8.8
- CVE-2020-18325Multilple Cross Site Scripting (XSS) vulnerability exists in Intelliants Subrion CMS v4.2.1 in the Configuration panel.6.1
- CVE-2020-18324Cross Site Scripting (XSS) vulnerability exists in Subrion CMS 4.2.1 via the q parameter in the Kickstart template.6.1
Product grouping is registry-driven, with AI assist and human review. How it works